CVE

Id
87707  
CVE No.
CVE-2016-10197  
Status
Candidate  
Description
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.  
Phase
Assigned (20170201)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
764885 87707 CVE-2016-10197 MLIST:[oss-security] 20170131 Bugs fixed in libevent 2.1.6  View
764886 87707 CVE-2016-10197 URL:http://www.openwall.com/lists/oss-security/2017/01/31/17  View
764887 87707 CVE-2016-10197 MLIST:[oss-security] 20170202 Re: Bugs fixed in libevent 2.1.6  View
764888 87707 CVE-2016-10197 URL:http://www.openwall.com/lists/oss-security/2017/02/02/7  View
764889 87707 CVE-2016-10197 CONFIRM:https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog  View
764890 87707 CVE-2016-10197 CONFIRM:https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e  View
764891 87707 CVE-2016-10197 CONFIRM:https://github.com/libevent/libevent/issues/332  View
764892 87707 CVE-2016-10197 DEBIAN:DSA-3789  View
764893 87707 CVE-2016-10197 URL:http://www.debian.org/security/2017/dsa-3789  View
764894 87707 CVE-2016-10197 BID:96014  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51 JVNDB-2016-000053 EC-CUBE におけるクロスサイトリクエストフォージェリの脆弱性 株式会社ロックオンが提供する EC-CUBE は、オープンソースのショッピングサイト構築システムです。EC-CUBE には、クロスサイトリクエストフォージェリ (CWE-352) の脆弱性が存在します。 CVE-2016-1201 87707 2.6 4.3 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000053.html  View