NVD

Id
18394  
Name
CVE-2016-2090  
Description
Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2017-01-13  
Modified Date
2017-01-17  
Seq
2016-2090  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
101776 18394 CVE-2016-2090 [oss-security] 20160128 Re: Heap buffer overflow in fgetwln function of libbsd  View
101777 18394 CVE-2016-2090 https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html  View
101778 18394 CVE-2016-2090 https://bugs.freedesktop.org/show_bug.cgi?id=93881  View
101779 18394 CVE-2016-2090 https://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7  View
101780 18394 CVE-2016-2090 FEDORA-2016-d3e562bb52  View
101781 18394 CVE-2016-2090 FEDORA-2016-5c3d057783  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64635 JVNDB-2016-006876 libbsd の fgetwln 関数におけるヒープベースのバッファオーバーフローの脆弱性 libbsd の fgetwln 関数には、一つずれ (Off-by-One) により、ヒープベースのバッファオーバーフローを誘発される脆弱性が存在します。 CVE-2016-2090 CVE-2016-2090 18394 7.5 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006876.html 2016-01-27 2017-01-27 View