CVE

Id
87705  
CVE No.
CVE-2016-10195  
Status
Candidate  
Description
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764865 87705 CVE-2016-10195 MLIST:[oss-security] 20170131 Bugs fixed in libevent 2.1.6  View
764866 87705 CVE-2016-10195 URL:http://www.openwall.com/lists/oss-security/2017/01/31/17  View
764867 87705 CVE-2016-10195 MLIST:[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6  View
764868 87705 CVE-2016-10195 URL:http://www.openwall.com/lists/oss-security/2017/02/02/7  View
764869 87705 CVE-2016-10195 CONFIRM:https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog  View
764870 87705 CVE-2016-10195 CONFIRM:https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d  View
764871 87705 CVE-2016-10195 CONFIRM:https://github.com/libevent/libevent/issues/317  View
764872 87705 CVE-2016-10195 DEBIAN:DSA-3789  View
764873 87705 CVE-2016-10195 URL:http://www.debian.org/security/2017/dsa-3789  View
764874 87705 CVE-2016-10195 BID:96014  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49 JVNDB-2016-000051 EC-CUBE におけるアクセス制限不備の脆弱性 株式会社ロックオンが提供する EC-CUBE は、オープンソースのショッピングサイト構築システムです。EC-CUBE には、アクセス制限不備の脆弱性が存在します。 CVE-2016-1199 87705 5 5.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000051.html  View