CVE

Id
87706  
CVE No.
CVE-2016-10196  
Status
Candidate  
Description
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764875 87706 CVE-2016-10196 MLIST:[oss-security] 20170131 Bugs fixed in libevent 2.1.6  View
764876 87706 CVE-2016-10196 URL:http://www.openwall.com/lists/oss-security/2017/01/31/17  View
764877 87706 CVE-2016-10196 MLIST:[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6  View
764878 87706 CVE-2016-10196 URL:http://www.openwall.com/lists/oss-security/2017/02/02/7  View
764879 87706 CVE-2016-10196 CONFIRM:https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog  View
764880 87706 CVE-2016-10196 CONFIRM:https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5  View
764881 87706 CVE-2016-10196 CONFIRM:https://github.com/libevent/libevent/issues/318  View
764882 87706 CVE-2016-10196 DEBIAN:DSA-3789  View
764883 87706 CVE-2016-10196 URL:http://www.debian.org/security/2017/dsa-3789  View
764884 87706 CVE-2016-10196 BID:96014  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50 JVNDB-2016-000052 EC-CUBE におけるアクセス制限不備の脆弱性 株式会社ロックオンが提供する EC-CUBE は、オープンソースのショッピングサイト構築システムです。EC-CUBE には、アクセス制限不備の脆弱性が存在します。 CVE-2016-1200 87706 5.5 5.4 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000052.html  View