Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0797.

Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap memory corruption or NULL pointer dereference) or possibly have unspecified other impact via a long digit string that is mishandled by the (1) BN_dec2bn or (2) BN_hex2bn function, related to crypto/bn/bn.h and crypto/bn/bn_print.c.


Provide references for further information: Can you share references or external links related to CVE-2016-0797?

{'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': '83763', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83763'}, {'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10156'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'openSUSE-SU-2016:1239', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'name': 'HPSBGN03563', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=145889460330120&w=2'}, {'name': 'USN-2914-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2914-1'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'name': 'openSUSE-SU-2016:1566', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-06/msg00019.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'name': 'openSUSE-SU-2016:1241', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=c175308407858afff3fc8c2e5e085d94d12edc7d'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'name': 'DSA-3500', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2016/dsa-3500'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'openSUSE-SU-2016:0627', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05052990'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0797?


Explain the CVE ID: What does the identifier CVE-2016-0798 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0798.

Memory leak in the SRP_VBASE_get_by_user implementation in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory consumption) by providing an invalid username in a connection attempt, related to apps/s_server.c and crypto/srp/srp_vfy.c.


Provide references for further information: Can you share references or external links related to CVE-2016-0798?

{'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=259b664f950c2ba66fbf4b0fe5281327904ead21'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'name': 'USN-2914-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2914-1'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'name': '83705', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83705'}, {'name': 'DSA-3500', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2016/dsa-3500'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'openSUSE-SU-2016:0627', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0798?


Explain the CVE ID: What does the identifier CVE-2016-0799 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0799.

The fmtstr function in crypto/bio/b_print.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g improperly calculates string lengths, which allows remote attackers to cause a denial of service (overflow and out-of-bounds read) or possibly have unspecified other impact via a long string, as demonstrated by a large amount of ASN.1 data, a different vulnerability than CVE-2016-2842.


Provide references for further information: Can you share references or external links related to CVE-2016-0799?

{'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'name': '83755', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83755'}, {'name': 'FEDORA-2016-2802690366', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178358.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05131085'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667'}, {'name': 'RHSA-2016:2073', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2073.html'}, {'name': 'FEDORA-2016-e6807b3394', 'tags': ['vendor-advisory'], 'url': 'http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178817.html'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html'}, {'name': 'HPSBMU03575', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=146108058503441&w=2'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05111017'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05376917'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'name': 'openSUSE-SU-2016:1239', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150888'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05135617'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'name': 'HPSBGN03569', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=145983526810210&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05158380'}, {'name': 'USN-2914-1', 'tags': ['vendor-advisory'], 'url': 'http://www.ubuntu.com/usn/USN-2914-1'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150736'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05126404'}, {'name': 'openSUSE-SU-2016:1241', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html'}, {'url': 'http://openssl.org/news/secadv/20160301.txt'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05390722'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441'}, {'name': 'DSA-3500', 'tags': ['vendor-advisory'], 'url': 'http://www.debian.org/security/2016/dsa-3500'}, {'name': 'RHSA-2016:0996', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0996.html'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'url': 'https://git.openssl.org/?p=openssl.git%3Ba=commit%3Bh=578b956fe741bf8e84055547b1e83c28dd902c73'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'name': 'RHSA-2016:2957', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-2957.html'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800'}, {'name': 'RHSA-2016:0722', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-0722.html'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0799?


Explain the CVE ID: What does the identifier CVE-2016-0800 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0800.

The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.


Provide references for further information: Can you share references or external links related to CVE-2016-0800?

{'url': 'https://kc.mcafee.com/corporate/index?page=content&id=SB10154'}, {'url': 'http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html'}, {'url': 'https://access.redhat.com/security/vulnerabilities/drown'}, {'name': 'HPSBMU03573', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=146133665209436&w=2'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05307589'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujan2018-3236628.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667'}, {'name': 'HPSBMU03575', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=146108058503441&w=2'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03726en_us'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05176765'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html'}, {'url': 'http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160330-01-openssl-en'}, {'name': 'openSUSE-SU-2016:0638', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00010.html'}, {'name': 'FreeBSD-SA-16:12', 'tags': ['vendor-advisory'], 'url': 'https://security.FreeBSD.org/advisories/FreeBSD-SA-16:12.openssl.asc'}, {'url': 'http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html'}, {'name': 'openSUSE-SU-2016:1239', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00015.html'}, {'name': 'SUSE-SU-2016:0621', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00003.html'}, {'name': 'openSUSE-SU-2016:0640', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00011.html'}, {'url': 'https://security.netapp.com/advisory/ntap-20160301-0001/'}, {'name': 'HPSBGN03569', 'tags': ['vendor-advisory'], 'url': 'http://marc.info/?l=bugtraq&m=145983526810210&w=2'}, {'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-103-03'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05096953'}, {'name': 'SUSE-SU-2016:1057', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00038.html'}, {'url': 'https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA40168'}, {'name': 'VU#583776', 'tags': ['third-party-advisory'], 'url': 'https://www.kb.cert.org/vuls/id/583776'}, {'url': 'https://drownattack.com'}, {'url': 'https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes'}, {'name': 'openSUSE-SU-2016:1241', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00017.html'}, {'name': '20160302 Multiple Vulnerabilities in OpenSSL Affecting Cisco Products: March 2016', 'tags': ['vendor-advisory'], 'url': 'http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160302-openssl'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05086877'}, {'name': 'openSUSE-SU-2016:0720', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00025.html'}, {'name': 'SUSE-SU-2016:0624', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00004.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05386804'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05143554'}, {'name': '83733', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/83733'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05141441'}, {'url': 'https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf03741en_us'}, {'name': 'RHSA-2016:1519', 'tags': ['vendor-advisory'], 'url': 'http://rhn.redhat.com/errata/RHSA-2016-1519.html'}, {'name': 'SUSE-SU-2016:0631', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00007.html'}, {'url': 'https://www.openssl.org/news/secadv/20160301.txt'}, {'url': 'http://www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html'}, {'name': '91787', 'tags': ['vdb-entry'], 'url': 'http://www.securityfocus.com/bid/91787'}, {'name': 'SUSE-SU-2016:0617', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00001.html'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10722'}, {'url': 'http://www.siemens.com/cert/pool/cert/siemens_security_advisory_ssa-623229.pdf'}, {'name': 'GLSA-201603-15', 'tags': ['vendor-advisory'], 'url': 'https://security.gentoo.org/glsa/201603-15'}, {'url': 'http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05068681'}, {'url': 'http://support.citrix.com/article/CTX208403'}, {'name': 'openSUSE-SU-2016:0628', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00006.html'}, {'name': '1035133', 'tags': ['vdb-entry'], 'url': 'http://www.securitytracker.com/id/1035133'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05150800'}, {'name': 'SUSE-SU-2016:0678', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00017.html'}, {'name': 'SUSE-SU-2016:0620', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00002.html'}, {'name': 'openSUSE-SU-2016:0637', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00009.html'}, {'name': 'openSUSE-SU-2016:0627', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00005.html'}, {'name': 'SUSE-SU-2016:0641', 'tags': ['vendor-advisory'], 'url': 'http://lists.opensuse.org/opensuse-security-announce/2016-03/msg00012.html'}, {'url': 'https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05073516'}, {'url': 'http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10759'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-623229.pdf'}, {'url': 'https://www.arista.com/en/support/advisories-notices/security-advisories/1260-security-advisory-18'}, {'url': 'https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0800?


Explain the CVE ID: What does the identifier CVE-2016-0801 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0801.

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25662029.


Provide references for further information: Can you share references or external links related to CVE-2016-0801?

{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '39801', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39801/'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': '[debian-lts-announce] 20181113 [SECURITY] [DLA 1573-1] firmware-nonfree security update', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'https://lists.debian.org/debian-lts-announce/2018/11/msg00015.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0801?


Explain the CVE ID: What does the identifier CVE-2016-0802 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0802.

The Broadcom Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted wireless control message packets, aka internal bug 25306181.


Provide references for further information: Can you share references or external links related to CVE-2016-0802?

{'name': 'APPLE-SA-2016-03-21-5', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206167'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206168'}, {'name': '1035353', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1035353'}, {'name': 'APPLE-SA-2016-03-21-1', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00000.html'}, {'name': 'APPLE-SA-2016-03-21-2', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00001.html'}, {'name': 'APPLE-SA-2016-03-21-3', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2016/Mar/msg00002.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206169'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://support.apple.com/HT206166'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0802?


Explain the CVE ID: What does the identifier CVE-2016-0803 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0803.

libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a large memory allocation in the (1) SoftMPEG4Encoder or (2) SoftVPXEncoder component, aka internal bug 25812794.


Provide references for further information: Can you share references or external links related to CVE-2016-0803?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fav/+/50270d98e26fa18b20ca88216c3526667b724ba7'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0803?


Explain the CVE ID: What does the identifier CVE-2016-0804 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0804.

The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434.


Provide references for further information: Can you share references or external links related to CVE-2016-0804?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fav/+/224858e719d045c8554856b12c4ab73d2375cf33'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0804?


Explain the CVE ID: What does the identifier CVE-2016-0805 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0805.

The performance event manager for Qualcomm ARM processors in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25773204.


Provide references for further information: Can you share references or external links related to CVE-2016-0805?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0805?


Explain the CVE ID: What does the identifier CVE-2016-0806 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0806.

The Qualcomm Wi-Fi driver in the kernel in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application, aka internal bug 25344453.


Provide references for further information: Can you share references or external links related to CVE-2016-0806?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0806?


Explain the CVE ID: What does the identifier CVE-2016-0807 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0807.

The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394.


Provide references for further information: Can you share references or external links related to CVE-2016-0807?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fsystem%2Fcore/+/d917514bd6b270df431ea4e781a865764d406120'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0807?


Explain the CVE ID: What does the identifier CVE-2016-0808 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0808.

Integer overflow in the getCoverageFormat12 function in CmapCoverage.cpp in the Minikin library in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 allows attackers to cause a denial of service (continuous rebooting) via an application that triggers loading of a crafted TTF font, aka internal bug 25645298.


Provide references for further information: Can you share references or external links related to CVE-2016-0808?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/minikin/+/ed4c8d79153baab7f26562afb8930652dfbf853b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0808?


Explain the CVE ID: What does the identifier CVE-2016-0809 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0809.

Use-after-free vulnerability in the wifi_cleanup function in bcmdhd/wifi_hal/wifi_hal.cpp in Wi-Fi in Android 6.x before 2016-02-01 allows attackers to gain privileges by leveraging access to the local physical environment during execution of a crafted application, aka internal bug 25753768.


Provide references for further information: Can you share references or external links related to CVE-2016-0809?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/hardware/broadcom/wlan/+/2c5a4fac8bc8198f6a2635ede776f8de40a0c3e1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0809?


Explain the CVE ID: What does the identifier CVE-2016-0810 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0810.

media/libmedia/SoundPool.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49G, and 6.x before 2016-02-01 mishandles locking requirements, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25781119.


Provide references for further information: Can you share references or external links related to CVE-2016-0810?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fav/+/19c47afbc402542720ddd280e1bbde3b2277b586'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0810?


Explain the CVE ID: What does the identifier CVE-2016-0811 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0811.

Integer overflow in the BnCrypto::onTransact function in media/libmedia/ICrypto.cpp in libmediaplayerservice in Android 6.x before 2016-02-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an improper size calculation, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25800375.


Provide references for further information: Can you share references or external links related to CVE-2016-0811?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fav/+/22f824feac43d5758f9a70b77f2aca840ba62c3b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0811?


Explain the CVE ID: What does the identifier CVE-2016-0812 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0812.

The interceptKeyBeforeDispatching function in policy/src/com/android/internal/policy/impl/PhoneWindowManager.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.0 before 2016-02-01 does not properly check for setup completion, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25229538.


Provide references for further information: Can you share references or external links related to CVE-2016-0812?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/84669ca8de55d38073a0dcb01074233b0a417541'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0812?


Explain the CVE ID: What does the identifier CVE-2016-0813 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0813.

packages/SystemUI/src/com/android/systemui/recents/AlternateRecentsComponent.java in Setup Wizard in Android 5.1.x before 5.1.1 LMY49G and 6.x before 2016-02-01 does not properly check for device provisioning, which allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25476219.


Provide references for further information: Can you share references or external links related to CVE-2016-0813?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fbase/+/16a76dadcc23a13223e9c2216dad1fe5cad7d6e1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-02-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0813?


Explain the CVE ID: What does the identifier CVE-2016-0815 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0815.

The MPEG4Source::fragmentedRead function in MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26365349.


Provide references for further information: Can you share references or external links related to CVE-2016-0815?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform%2Fframeworks%2Fav/+/5403587a74aee2fb57076528c3927851531c8afb'}, {'name': '84235', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84235'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0815?


Explain the CVE ID: What does the identifier CVE-2016-0816 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0816.

mediaserver in Android 6.x before 2016-03-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to decoder/ih264d_parse_islice.c and decoder/ih264d_parse_pslice.c, aka internal bug 25928803.


Provide references for further information: Can you share references or external links related to CVE-2016-0816?

{'name': '84235', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84235'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libavc/+/4a524d3a8ae9aa20c36430008e6bd429443f8f1d'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0816?


Explain the CVE ID: What does the identifier CVE-2016-0818 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0818.

The caching functionality in the TrustManagerImpl class in TrustManagerImpl.java in Conscrypt in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 mishandles the distinction between an intermediate CA and a trusted root CA, which allows man-in-the-middle attackers to spoof servers by leveraging access to an intermediate CA to issue a certificate, aka internal bug 26232830.


Provide references for further information: Can you share references or external links related to CVE-2016-0818?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/conscrypt/+/4c9f9c2201116acf790fca25af43995d29980ee0'}, {'name': '84245', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84245'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/conscrypt/+/c4ab1b959280413fb11bf4fd7f6b4c2ba38bd779'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0818?


Explain the CVE ID: What does the identifier CVE-2016-0819 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0819.

The Qualcomm performance component in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 25364034.


Provide references for further information: Can you share references or external links related to CVE-2016-0819?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': '84250', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84250'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0819?


Explain the CVE ID: What does the identifier CVE-2016-0820 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0820.

The MediaTek Wi-Fi kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application, aka internal bug 26267358.


Provide references for further information: Can you share references or external links related to CVE-2016-0820?

{'name': '84257', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84257'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0820?


Explain the CVE ID: What does the identifier CVE-2016-0821 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0821.

The LIST_POISON feature in include/linux/poison.h in the Linux kernel before 4.3, as used in Android 6.0.1 before 2016-03-01, does not properly consider the relationship to the mmap_min_addr value, which makes it easier for attackers to bypass a poison-pointer protection mechanism by triggering the use of an uninitialized list entry, aka Android internal bug 26186802, a different vulnerability than CVE-2015-3636.


Provide references for further information: Can you share references or external links related to CVE-2016-0821?

{'name': 'USN-2971-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2971-2'}, {'name': 'USN-2967-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2967-1'}, {'name': 'USN-2970-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2970-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/8a5e5e02fc83aaf67053ab53b359af08c6c49aaf'}, {'name': '[oss-security] 20150502 Re: CVE request for a fixed bug existed in all versions of linux kernel from KeenTeam', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://www.openwall.com/lists/oss-security/2015/05/02/6'}, {'name': 'USN-2969-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2969-1'}, {'name': 'USN-2967-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2967-2'}, {'name': 'USN-2968-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2968-1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': 'USN-2971-3', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2971-3'}, {'name': 'DSA-3607', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2016/dsa-3607'}, {'name': 'USN-2971-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2971-1'}, {'name': 'USN-2968-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/USN-2968-2'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=8a5e5e02fc83aaf67053ab53b359af08c6c49aaf'}, {'name': '84260', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84260'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0821?


Explain the CVE ID: What does the identifier CVE-2016-0822 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0822.

The MediaTek connectivity kernel driver in Android 6.0.1 before 2016-03-01 allows attackers to gain privileges via a crafted application that leverages conn_launcher access, aka internal bug 25873324.


Provide references for further information: Can you share references or external links related to CVE-2016-0822?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': '84263', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84263'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0822?


Explain the CVE ID: What does the identifier CVE-2016-0823 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0823.

The pagemap_open function in fs/proc/task_mmu.c in the Linux kernel before 3.19.3, as used in Android 6.0.1 before 2016-03-01, allows local users to obtain sensitive physical-address information by reading a pagemap file, aka Android internal bug 25739721.


Provide references for further information: Can you share references or external links related to CVE-2016-0823?

{'name': '84265', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84265'}, {'tags': ['x_refsource_MISC'], 'url': 'http://googleprojectzero.blogspot.com/2015/03/exploiting-dram-rowhammer-bug-to-gain.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.19.3'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://github.com/torvalds/linux/commit/ab676b7d6fbf4b294bf198fb27ade5b0e865c7ce'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0823?


Explain the CVE ID: What does the identifier CVE-2016-0824 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0824.

libmpeg2 in libstagefright in Android 6.x before 2016-03-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via crafted Bitstream data, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 25765591.


Provide references for further information: Can you share references or external links related to CVE-2016-0824?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': '84262', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84262'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libmpeg2/+/ffab15eb80630dc799eb410855c93525b75233c3'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0824?


Explain the CVE ID: What does the identifier CVE-2016-0825 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0825.

The Widevine Trusted Application in Android 6.0.1 before 2016-03-01 allows attackers to obtain sensitive TrustZone secure-storage information by leveraging kernel access, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 20860039.


Provide references for further information: Can you share references or external links related to CVE-2016-0825?

{'name': '84269', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84269'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0825?


Explain the CVE ID: What does the identifier CVE-2016-0826 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0826.

libcameraservice in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not require use of the ICameraService::dump method for a camera service dump, which allows attackers to gain privileges via a crafted application that directly dumps, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26265403.


Provide references for further information: Can you share references or external links related to CVE-2016-0826?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/899823966e78552bb6dfd7772403a4f91471d2b0'}, {'name': '84268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84268'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/c9ab2b0bb05a7e19fb057e79b36e232809d70122'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0826?


Explain the CVE ID: What does the identifier CVE-2016-0827 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0827.

Multiple integer overflows in libeffects in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, related to EffectBundle.cpp and EffectReverb.cpp, aka internal bug 26347509.


Provide references for further information: Can you share references or external links related to CVE-2016-0827?

{'name': '84268', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84268'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/9e29523b9537983b4c4b205ff868d0b3bca0383b'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0827?


Explain the CVE ID: What does the identifier CVE-2016-0828 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0828.

The BnGraphicBufferConsumer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not initialize a certain slot variable, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering an ATTACH_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338113.


Provide references for further information: Can you share references or external links related to CVE-2016-0828?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/native/+/dded8fdbb700d6cc498debc69a780915bc34d755'}, {'name': '84261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84261'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0828?


Explain the CVE ID: What does the identifier CVE-2016-0829 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0829.

The BnGraphicBufferProducer::onTransact function in libs/gui/IGraphicBufferConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.x before 5.1.1 LMY49H, and 6.x before 2016-03-01 does not initialize a certain output data structure, which allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, by triggering a QUEUE_BUFFER action, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26338109.


Provide references for further information: Can you share references or external links related to CVE-2016-0829?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/native/+/d06421fd37fbb7fd07002e6738fac3a223cb1a62'}, {'name': '84261', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84261'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0829?


Explain the CVE ID: What does the identifier CVE-2016-0830 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0830.

btif_config.c in Bluetooth in Android 6.x before 2016-03-01 allows remote attackers to cause a denial of service (memory corruption and persistent daemon crash) by triggering a large number of configuration entries, and consequently exceeding the maximum size of a configuration file, aka internal bug 26071376.


Provide references for further information: Can you share references or external links related to CVE-2016-0830?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/system/bt/+/d77f1999ecece56c1cbb333f4ddc26f0b5bac2c5'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': '84270', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84270'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0830?


Explain the CVE ID: What does the identifier CVE-2016-0831 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0831.

The getDeviceIdForPhone function in internal/telephony/PhoneSubInfoController.java in Telephony in Android 5.x before 5.1.1 LMY49H and 6.x before 2016-03-01 does not check for the READ_PHONE_STATE permission, which allows attackers to obtain sensitive information via a crafted application, aka internal bug 25778215.


Provide references for further information: Can you share references or external links related to CVE-2016-0831?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/opt/telephony/+/79eecef63f3ea99688333c19e22813f54d4a31b1'}, {'name': '84266', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84266'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0831?


Explain the CVE ID: What does the identifier CVE-2016-0832 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0832.

Setup Wizard in Android 5.1.x before LMY49H and 6.x before 2016-03-01 allows physically proximate attackers to bypass the Factory Reset Protection protection mechanism and delete data via unspecified vectors, aka internal bug 25955042.


Provide references for further information: Can you share references or external links related to CVE-2016-0832?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-03-01.html'}, {'name': '84264', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/84264'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0832?


Explain the CVE ID: What does the identifier CVE-2016-0833 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0833.

Android allows users to cause a denial of service.


Provide references for further information: Can you share references or external links related to CVE-2016-0833?

{'tags': ['x_refsource_MISC'], 'url': 'https://www.linkedin.com/in/jose-maria-ariel-martinez-juarez-7910a189/'}, {'name': '98009', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/98009'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0833?


Explain the CVE ID: What does the identifier CVE-2016-0834 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0834.

An unspecified media codec in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26220548.


Provide references for further information: Can you share references or external links related to CVE-2016-0834?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://nvidia.custhelp.com/app/answers/detail/a_id/4561'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0834?


Explain the CVE ID: What does the identifier CVE-2016-0835 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0835.

decoder/impeg2d_dec_hdr.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file that triggers a certain negative value, aka internal bug 26070014.


Provide references for further information: Can you share references or external links related to CVE-2016-0835?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libmpeg2/+/ba604d336b40fd4bde1622f64d67135bdbd61301'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libmpeg2/+/58a6822d7140137ce957c6d2fc20bae1374186c1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0835?


Explain the CVE ID: What does the identifier CVE-2016-0836 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0836.

Stack-based buffer overflow in decoder/impeg2d_vld.c in mediaserver in Android 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25812590.


Provide references for further information: Can you share references or external links related to CVE-2016-0836?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libmpeg2/+/8b4ed5a23175b7ffa56eea4678db7287f825e985'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0836?


Explain the CVE ID: What does the identifier CVE-2016-0837 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0837.

MPEG4Extractor.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read and memory corruption) via a crafted media file, aka internal bug 27208621.


Provide references for further information: Can you share references or external links related to CVE-2016-0837?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/7a282fb64fef25349e9d341f102d9cea3bf75baf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0837?


Explain the CVE ID: What does the identifier CVE-2016-0838 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0838.

Sonivox in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not check for a negative number of samples, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, related to arm-wt-22k/lib_src/eas_wtengine.c and arm-wt-22k/lib_src/eas_wtsynth.c, aka internal bug 26366256.


Provide references for further information: Can you share references or external links related to CVE-2016-0838?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/sonivox/+/24d7c408c52143bce7b49de82f3913fd8d1219cf'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/sonivox/+/3ac044334c3ff6a61cb4238ff3ddaf17c7efcf49'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0838?


Explain the CVE ID: What does the identifier CVE-2016-0839 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0839.

post_proc/volume_listener.c in mediaserver in Android 6.x before 2016-04-01 mishandles deleted effect context, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25753245.


Provide references for further information: Can you share references or external links related to CVE-2016-0839?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/hardware/qcom/audio/+/ebbb82365172337c6c250c6cac4e326970a9e351'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0839?


Explain the CVE ID: What does the identifier CVE-2016-0840 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0840.

Multiple stack-based buffer underflows in decoder/ih264d_parse_cavlc.c in mediaserver in Android 6.x before 2016-04-01 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26399350.


Provide references for further information: Can you share references or external links related to CVE-2016-0840?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libavc/+/c57fc3703ae2e0d41b1f6580c50015937f2d23c1'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0840?


Explain the CVE ID: What does the identifier CVE-2016-0841 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0841.

media/libmedia/mediametadataretriever.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 mishandles cleared service binders, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 26040840.


Provide references for further information: Can you share references or external links related to CVE-2016-0841?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/av/+/3097f364237fb552871f7639d37a7afa4563e252'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0841?


Explain the CVE ID: What does the identifier CVE-2016-0842 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0842.

The H.264 decoder in libstagefright in Android 6.x before 2016-04-01 mishandles Memory Management Control Operation (MMCO) data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25818142.


Provide references for further information: Can you share references or external links related to CVE-2016-0842?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/libavc/+/943323f1d9d3dd5c2634deb26cbe72343ca6b3db'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0842?


Explain the CVE ID: What does the identifier CVE-2016-0843 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0843.

The Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to gain privileges via a crafted application, aka internal bug 25801197.


Provide references for further information: Can you share references or external links related to CVE-2016-0843?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0843?


Explain the CVE ID: What does the identifier CVE-2016-0844 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0844.

The Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to socket ioctl calls, which allows attackers to gain privileges via a crafted application, aka internal bug 26324307.


Provide references for further information: Can you share references or external links related to CVE-2016-0844?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/sepolicy/+/57531cacb40682be4b1189c721fd1e7f25bf3786'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0844?


Explain the CVE ID: What does the identifier CVE-2016-0845 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0845.


Provide references for further information: Can you share references or external links related to CVE-2016-0845?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0845?


Explain the CVE ID: What does the identifier CVE-2016-0846 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0846.

libs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 does not properly consider the heap size, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26877992.


Provide references for further information: Can you share references or external links related to CVE-2016-0846?

{'name': '39686', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39686/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/frameworks/native/+/f3199c228aced7858b75a8070b8358c155ae0149'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0846?


Explain the CVE ID: What does the identifier CVE-2016-0847 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0847.

The Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to spoof the originating telephone number of a call via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26864502.


Provide references for further information: Can you share references or external links related to CVE-2016-0847?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/packages/services/Telephony/+/a294ae5342410431a568126183efe86261668b5d'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/packages/services/Telecomm/+/2750faaa1ec819eed9acffea7bd3daf867fda444'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0847?


Explain the CVE ID: What does the identifier CVE-2016-0848 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0848.

Race condition in Download Manager in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows attackers to bypass private-storage file-access restrictions via a crafted application that changes a symlink target, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26211054.


Provide references for further information: Can you share references or external links related to CVE-2016-0848?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/packages/providers/DownloadProvider/+/bdc831357e7a116bc561d51bf2ddc85ff11c01a9'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0848?


Explain the CVE ID: What does the identifier CVE-2016-0849 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0849.

Multiple integer overflows in minzip/SysUtil.c in the Recovery Procedure in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allow attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 26960931.


Provide references for further information: Can you share references or external links related to CVE-2016-0849?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/bootable/recovery/+/28a566f7731b4cb76d2a9ba16d997ac5aeb07dad'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0849?


Explain the CVE ID: What does the identifier CVE-2016-0850 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0850.

The PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01 allows remote attackers to bypass intended pairing restrictions via a crafted device, aka internal bug 26551752.


Provide references for further information: Can you share references or external links related to CVE-2016-0850?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://android.googlesource.com/platform/external/bluetooth/bluedroid/+/c677ee92595335233eb0e7b59809a1a94e7a678a'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://source.android.com/security/bulletin/2016-04-02.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0850?


Explain the CVE ID: What does the identifier CVE-2016-0851 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0851.

Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service (out-of-bounds memory access) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0851?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0851?


Explain the CVE ID: What does the identifier CVE-2016-0852 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0852.

Advantech WebAccess before 8.1 allows remote attackers to bypass an intended administrative requirement and obtain file or folder access via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0852?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0852?


Explain the CVE ID: What does the identifier CVE-2016-0853 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0853.

Advantech WebAccess before 8.1 allows remote attackers to obtain sensitive information via crafted input.


Provide references for further information: Can you share references or external links related to CVE-2016-0853?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0853?


Explain the CVE ID: What does the identifier CVE-2016-0854 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0854.

Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer in Advantech WebAccess before 8.1 allows remote attackers to write to files of arbitrary types via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0854?

{'name': '39735', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39735/'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-127'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-128'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.rapid7.com/db/modules/exploit/windows/scada/advantech_webaccess_dashboard_file_upload'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-129'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0854?


Explain the CVE ID: What does the identifier CVE-2016-0855 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0855.

Directory traversal vulnerability in Advantech WebAccess before 8.1 allows remote attackers to list arbitrary virtual-directory files via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0855?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-126'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-124'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-125'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-122'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-123'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0855?


Explain the CVE ID: What does the identifier CVE-2016-0856 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0856.

Multiple stack-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0856?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-112'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-101'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-118'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-120'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-116'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-108'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-102'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-113'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-103'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-117'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-115'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-106'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-114'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-110'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-109'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-100'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-111'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0856?


Explain the CVE ID: What does the identifier CVE-2016-0857 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0857.

Multiple heap-based buffer overflows in Advantech WebAccess before 8.1 allow remote attackers to execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0857?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-121'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-107'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-119'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0857?


Explain the CVE ID: What does the identifier CVE-2016-0858 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0858.

Race condition in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via a crafted request.


Provide references for further information: Can you share references or external links related to CVE-2016-0858?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-105'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0858?


Explain the CVE ID: What does the identifier CVE-2016-0859 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0859.

Integer overflow in the Kernel service in Advantech WebAccess before 8.1 allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer overflow) via a crafted RPC request.


Provide references for further information: Can you share references or external links related to CVE-2016-0859?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-104'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0859?


Explain the CVE ID: What does the identifier CVE-2016-0860 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0860.

Buffer overflow in the BwpAlarm subsystem in Advantech WebAccess before 8.1 allows remote attackers to cause a denial of service via a crafted RPC request.


Provide references for further information: Can you share references or external links related to CVE-2016-0860?

{'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-074'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-014-01'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.zerodayinitiative.com/advisories/ZDI-16-058'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0860?


Explain the CVE ID: What does the identifier CVE-2016-0861 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0861.

General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to execute arbitrary commands via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0861?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://apps.geindustrial.com/publibrary/checkout/Application%20and%20Technical%7CGEIS_SNMP%7CPDF&filename=GEIS_SNMP.pdf'}, {'tags': ['x_refsource_MISC'], 'url': 'http://packetstormsecurity.com/files/135586/GE-Industrial-Solutions-UPS-SNMP-Adapter-Command-Injection.html'}, {'name': '20160203 GE Industrial Solutions - UPS SNMP Adapter Command Injection and Clear-text Sensitive Info Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2016/Feb/21'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-033-02'}, {'name': '39408', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/39408/'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0861?


Explain the CVE ID: What does the identifier CVE-2016-0862 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0862.

General Electric (GE) Industrial Solutions UPS SNMP/Web Adapter devices with firmware before 4.8 allow remote authenticated users to obtain sensitive cleartext account information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0862?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0862?


Explain the CVE ID: What does the identifier CVE-2016-0863 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0863.

Cross-site request forgery (CSRF) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to hijack the authentication of arbitrary users.


Provide references for further information: Can you share references or external links related to CVE-2016-0863?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-040-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0863?


Explain the CVE ID: What does the identifier CVE-2016-0864 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0864.

Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to obtain sensitive report and username information via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0864?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0864?


Explain the CVE ID: What does the identifier CVE-2016-0865 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0865.

Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote authenticated users to change arbitrary passwords via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0865?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0865?


Explain the CVE ID: What does the identifier CVE-2016-0866 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0866.

Cross-site scripting (XSS) vulnerability in Tollgrade SmartGrid LightHouse Sensor Management System (SMS) Software EMS before 5.1, and 4.1.0 Build 16, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2016-0866?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0866?


Explain the CVE ID: What does the identifier CVE-2016-0867 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0867.

CAREL PlantVisorEnhanced allows remote attackers to bypass intended access restrictions via a direct file request.


Provide references for further information: Can you share references or external links related to CVE-2016-0867?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-021-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0867?


Explain the CVE ID: What does the identifier CVE-2016-0868 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0868.

Stack-based buffer overflow on Rockwell Automation Allen-Bradley MicroLogix 1100 devices A through 15.000 and B before 15.002 allows remote attackers to execute arbitrary code via a crafted web request.


Provide references for further information: Can you share references or external links related to CVE-2016-0868?

{'name': '1034861', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034861'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-026-02'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0868?


Explain the CVE ID: What does the identifier CVE-2016-0869 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0869.

Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a denial of service via a malformed HTML document.


Provide references for further information: Can you share references or external links related to CVE-2016-0869?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.promotic.eu/en/pmdoc/NewsPm803.htm#ver80311'}, {'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-026-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0869?


Explain the CVE ID: What does the identifier CVE-2016-0870 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0870.

The web server in Trane Tracer SC 4.2.1134 and earlier allows remote attackers to read sensitive configuration files via a direct request.


Provide references for further information: Can you share references or external links related to CVE-2016-0870?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-259-03'}, {'name': '92979', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/92979'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0870?


Explain the CVE ID: What does the identifier CVE-2016-0871 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0871.

Eaton Lighting EG2 Web Control 4.04P and earlier allows remote attackers to read the configuration file, and consequently discover credentials, via a direct request.


Provide references for further information: Can you share references or external links related to CVE-2016-0871?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-061-03'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0871?


Explain the CVE ID: What does the identifier CVE-2016-0872 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0872.

A Plaintext Storage of a Password issue was discovered in Kabona AB WebDatorCentral (WDC) versions prior to Version 3.4.0. WDC stores password credentials in plaintext.


Provide references for further information: Can you share references or external links related to CVE-2016-0872?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-287-07'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0872?


Explain the CVE ID: What does the identifier CVE-2016-0875 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0875.

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0875?

{'tags': ['x_refsource_MISC'], 'url': 'https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0875?


Explain the CVE ID: What does the identifier CVE-2016-0876 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0876.

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file.


Provide references for further information: Can you share references or external links related to CVE-2016-0876?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0876?


Explain the CVE ID: What does the identifier CVE-2016-0877 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0877.

Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function.


Provide references for further information: Can you share references or external links related to CVE-2016-0877?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0877?


Explain the CVE ID: What does the identifier CVE-2016-0878 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0878.

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests.


Provide references for further information: Can you share references or external links related to CVE-2016-0878?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0878?


Explain the CVE ID: What does the identifier CVE-2016-0879 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0879.

Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL.


Provide references for further information: Can you share references or external links related to CVE-2016-0879?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0879?


Explain the CVE ID: What does the identifier CVE-2016-0880 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0880.


Provide references for further information: Can you share references or external links related to CVE-2016-0880?


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0880?


Explain the CVE ID: What does the identifier CVE-2016-0881 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2016-0881.

EMC Documentum xCP 2.1 before patch 23 and 2.2 before patch 11 allows remote authenticated users to conduct Documentum Query Language (DQL) injection attacks and obtain sensitive repository information by appending a query to a REST request.


Provide references for further information: Can you share references or external links related to CVE-2016-0881?

{'name': '1034993', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id/1034993'}, {'name': '20160209 ESA-2016-010 EMC Documentum xCP Security Update for Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://seclists.org/bugtraq/2016/Feb/66'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2016-0881?


Explain the CVE ID: What does the identifier CVE-2016-0882 mean in the context of cybersecurity?