[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2016-10197Date: (C)2017-03-16   (M)2023-12-22


The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V3 Severity:CVSS V2 Severity:
CVSS Score : 7.5CVSS Score : 5.0
Exploit Score: 3.9Exploit Score: 10.0
Impact Score: 3.6Impact Score: 2.9
 
CVSS V3 Metrics:CVSS V2 Metrics:
Attack Vector: NETWORKAccess Vector: NETWORK
Attack Complexity: LOWAccess Complexity: LOW
Privileges Required: NONEAuthentication: NONE
User Interaction: NONEConfidentiality: NONE
Scope: UNCHANGEDIntegrity: NONE
Confidentiality: NONEAvailability: PARTIAL
Integrity: NONE 
Availability: HIGH 
  
Reference:
SECTRACK-1038320
BID-96014
DSA-3789
GLSA-201705-01
RHSA-2017:1104
RHSA-2017:1106
RHSA-2017:1201
http://www.openwall.com/lists/oss-security/2017/01/31/17
http://www.openwall.com/lists/oss-security/2017/02/02/7
https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog
https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e
https://github.com/libevent/libevent/issues/332

CPE    1
cpe:/o:debian:debian_linux:8.0
CWE    1
CWE-125
OVAL    26
oval:org.secpod.oval:def:89043862
oval:org.secpod.oval:def:1800913
oval:org.secpod.oval:def:204492
oval:org.secpod.oval:def:89002526
...

© SecPod Technologies