CVE-2016-10196

libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()

Published Mar 15, 2017 CVSS 3.1 · 7.5 High EPSS 5.2% KEV · Not listed
Description
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-824-1 libevent security update
Debian DSA Debian DSA DSA-3789-1 libevent security update
EUVD EUVD EUVD-2016-1381 Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Ubuntu USN Ubuntu USN USN-3228-1 libevent vulnerabilities
Ubuntu USN Ubuntu USN USN-3278-1 Thunderbird vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr
Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:52.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 3:14 AM
Reserved
Feb 1, 2017, 12:00 AM
Status
Modified
Published
Mar 15, 2017, 3:59 PM
Modified
Jun 17, 2026, 12:39 AM
Severity
Moderate
Public date
Jan 27, 2016, 12:00 AM