VDB
GCVE-110-MAGEIA-2017-66
GCVE-110-MAGEIA-2017-66
Advisory Published
* The DNS code of Libevent contains an OOB read which can trigger a crash
(CVE-2016-10197)
* The libevent evutil_parse_sockaddr_port() contains a buffer overflow
which can cause a segmentation fault (CVE-2016-10196)
* The name_parse() function in libevent's DNS code is vulnerable to a
buffer overread (CVE-2016-10195)
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | kdebase4-workspace | 0 (affected), 4.11.22-1.mga5 (unaffected) | — |
| Mageia | kdelibs4 | 4.14.35-1.mga5 (unaffected), 0 (affected) | — |
| Mageia | kdepim4-runtime | 4.14.10-1.mga5 (unaffected), 0 (affected) | — |
| Mageia | libevent | 0 (affected), 2.0.22-1.1.mga5 (unaffected), 0 (affected), 2.0.22-1.1.mga5 (unaffected) | — |
| Mageia | kdepimlibs4 | 0 (affected), 4.14.10-2.1.mga5 (unaffected) | — |
References
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.