Description
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Published: 2017-03-15
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-824-1 libevent security update
Debian DSA Debian DSA DSA-3789-1 libevent security update
EUVD EUVD EUVD-2016-1381 Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Ubuntu USN Ubuntu USN USN-3228-1 libevent vulnerabilities
Ubuntu USN Ubuntu USN USN-3278-1 Thunderbird vulnerabilities
History

Tue, 25 Nov 2025 18:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
Vendors & Products Mozilla firefox Esr

Mon, 21 Oct 2024 14:15:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:mozilla:firefox_esr:52.0:*:*:*:*:*:*:* cpe:2.3:a:mozilla:firefox:52.0:*:*:*:*:*:*:*

Subscriptions

Debian Debian Linux
Libevent Project Libevent
Mozilla Firefox Thunderbird
Redhat Enterprise Linux
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-06T03:14:42.884Z

Reserved: 2017-02-01T00:00:00.000Z

Link: CVE-2016-10196

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2017-03-15T15:59:00.437

Modified: 2025-11-25T17:50:16.803

Link: CVE-2016-10196

cve-icon Redhat

Severity : Moderate

Publid Date: 2016-01-27T00:00:00Z

Links: CVE-2016-10196 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses