CVE-2016-10196
libevent: Stack-buffer overflow in evutil_parse_sockaddr_port()
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Desbordamiento de búfer en la función evutil_parse_sockaddr_port en evutil.c en libevent en versiones anteriores a 2.1.6-beta permite a atacantes provocar una denegación de servicio (fallo de segmentación) a través de vectores que implican una cadena larga entre corchetes en el argumento ip_as_string.
A vulnerability was found in libevent with the parsing of IPv6 addresses. If an attacker could cause an application using libevent to parse a malformed address in IPv6 notation of more than 2GiB in length, a stack overflow would occur leading to a crash.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2017-02-01 CVE Reserved
- 2017-03-13 CVE Published
- 2024-02-16 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-121: Stack-based Buffer Overflow
- CWE-787: Out-of-bounds Write
CAPEC
References (19)
| URL | Tag | Source |
|---|---|---|
| http://www.openwall.com/lists/oss-security/2017/01/31/17 | Mailing List |
|
| http://www.openwall.com/lists/oss-security/2017/02/02/7 | Mailing List |
|
| http://www.securityfocus.com/bid/96014 | Third Party Advisory | |
| http://www.securitytracker.com/id/1038320 | Broken Link | |
| https://bugzilla.mozilla.org/show_bug.cgi?id=1343453 | Issue Tracking | |
| https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog | Release Notes | |
| https://www.mozilla.org/security/advisories/mfsa2017-10 | Third Party Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2017-11 | Third Party Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2017-12 | Third Party Advisory | |
| https://www.mozilla.org/security/advisories/mfsa2017-13 | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/libevent/libevent/issues/318 | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5 | 2022-01-31 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2017/dsa-3789 | 2022-01-31 | |
| https://access.redhat.com/errata/RHSA-2017:1104 | 2022-01-31 | |
| https://access.redhat.com/errata/RHSA-2017:1106 | 2022-01-31 | |
| https://access.redhat.com/errata/RHSA-2017:1201 | 2022-01-31 | |
| https://security.gentoo.org/glsa/201705-01 | 2022-01-31 | |
| https://access.redhat.com/security/cve/CVE-2016-10196 | 2017-05-08 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1418611 | 2017-05-08 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Debian Search vendor "Debian" | Debian Linux Search vendor "Debian" for product "Debian Linux" | 8.0 Search vendor "Debian" for product "Debian Linux" and version "8.0" | - |
Affected
| ||||||
| Libevent Project Search vendor "Libevent Project" | Libevent Search vendor "Libevent Project" for product "Libevent" | <= 2.1.5 Search vendor "Libevent Project" for product "Libevent" and version " <= 2.1.5" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Firefox Search vendor "Mozilla" for product "Firefox" | < 53.0 Search vendor "Mozilla" for product "Firefox" and version " < 53.0" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Firefox Esr Search vendor "Mozilla" for product "Firefox Esr" | < 45.9.0 Search vendor "Mozilla" for product "Firefox Esr" and version " < 45.9.0" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Firefox Esr Search vendor "Mozilla" for product "Firefox Esr" | 52.0 Search vendor "Mozilla" for product "Firefox Esr" and version "52.0" | - |
Affected
| ||||||
| Mozilla Search vendor "Mozilla" | Thunderbird Search vendor "Mozilla" for product "Thunderbird" | < 52.1.0 Search vendor "Mozilla" for product "Thunderbird" and version " < 52.1.0" | - |
Affected
| ||||||