CVE-2016-10196

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 91.92%
Affected Products (NVD)
VendorProductVersion
debiandebian_linux
8.0
libevent_projectlibevent
𝑥
≤ 2.1.5
mozillafirefox
𝑥
< 45.9.0
mozillafirefox
𝑥
< 53.0
mozillafirefox
52.0
mozillathunderbird
𝑥
< 52.1.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libevent
bookworm
2.1.12-stable-8
fixed
bullseye
2.1.12-stable-1
fixed
sid
2.1.12-stable-10
fixed
trixie
2.1.12-stable-10
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
precise
ignored
trusty
Fixed 53.0+build6-0ubuntu0.14.04.1
released
xenial
Fixed 53.0+build6-0ubuntu0.16.04.1
released
yakkety
Fixed 53.0+build6-0ubuntu0.16.10.1
released
zesty
Fixed 53.0+build6-0ubuntu0.17.04.1
released
libevent
precise
Fixed 2.0.16-stable-1ubuntu0.2
released
trusty
Fixed 2.0.21-stable-1ubuntu1.14.04.2
released
xenial
Fixed 2.0.21-stable-2ubuntu0.16.04.1
released
yakkety
Fixed 2.0.21-stable-2ubuntu0.16.10.1
released
zesty
Fixed 2.0.21-stable-3
released
thunderbird
trusty
Fixed 1:52.1.1+build1-0ubuntu0.14.04.1
released
xenial
Fixed 1:52.1.1+build1-0ubuntu0.16.04.1
released
yakkety
Fixed 1:52.1.1+build1-0ubuntu0.16.10.1
released
zesty
Fixed 1:52.1.1+build1-0ubuntu0.17.04.1
released
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
MozillaFirefox
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
MozillaFirefox-branding-SLE-52
suse enterprise sap 12
31.1
fixed
suse enterprise sap 12 SP1
31.1
fixed
suse enterprise sap 12 SP2
31.1
fixed
suse enterprise server 12
31.1
fixed
suse enterprise server 12 SP1
31.1
fixed
suse enterprise server 12 SP2
31.1
fixed
MozillaFirefox-translations-common
suse enterprise sap 12 SP5
68.1.0-109.92.1
fixed
suse enterprise server 12 SP5
68.1.0-109.92.1
fixed
libevent-2_0-5
suse enterprise sap 12 SP2
2.0.21-6.3.1
fixed
suse enterprise sap 12 SP5
2.0.21-6.3.1
fixed
suse enterprise server 12 SP2
2.0.21-6.3.1
fixed
suse enterprise server 12 SP3
2.0.21-6.3.1
fixed
suse enterprise server 12 SP4
2.0.21-6.3.1
fixed
suse enterprise server 12 SP5
2.0.21-6.3.1
fixed
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
firefox
RHEL 6
0:52.1.0-2.el6_9
fixed
RHEL 7
0:52.1.0-2.el7_3
fixed
thunderbird
RHEL 6
0:52.1.0-1.el6_9
fixed
RHEL 7
0:52.1.0-1.el7_3
fixed
Common Weakness Enumeration
References
http://www.debian.org/security/2017/dsa-3789
http://www.openwall.com/lists/oss-security/2017/01/31/17
http://www.openwall.com/lists/oss-security/2017/02/02/7
http://www.securityfocus.com/bid/96014
http://www.securitytracker.com/id/1038320
https://access.redhat.com/errata/RHSA-2017:1104
https://access.redhat.com/errata/RHSA-2017:1106
https://access.redhat.com/errata/RHSA-2017:1201
https://bugzilla.mozilla.org/show_bug.cgi?id=1343453
https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog
https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5
https://github.com/libevent/libevent/issues/318
https://security.gentoo.org/glsa/201705-01
https://www.mozilla.org/security/advisories/mfsa2017-10/
https://www.mozilla.org/security/advisories/mfsa2017-11/
https://www.mozilla.org/security/advisories/mfsa2017-12/
https://www.mozilla.org/security/advisories/mfsa2017-13/
http://www.debian.org/security/2017/dsa-3789
http://www.openwall.com/lists/oss-security/2017/01/31/17
http://www.openwall.com/lists/oss-security/2017/02/02/7
http://www.securityfocus.com/bid/96014
http://www.securitytracker.com/id/1038320
https://access.redhat.com/errata/RHSA-2017:1104
https://access.redhat.com/errata/RHSA-2017:1106
https://access.redhat.com/errata/RHSA-2017:1201
https://bugzilla.mozilla.org/show_bug.cgi?id=1343453
https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog
https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5
https://github.com/libevent/libevent/issues/318
https://security.gentoo.org/glsa/201705-01
https://www.mozilla.org/security/advisories/mfsa2017-10/
https://www.mozilla.org/security/advisories/mfsa2017-11/
https://www.mozilla.org/security/advisories/mfsa2017-12/
https://www.mozilla.org/security/advisories/mfsa2017-13/