PT-2016-4581 · Libevent+4 · Libevent+4
Guido Vranken
·
Publicado
2016-12-31
·
Atualizado
2022-01-31
·
CVE-2016-10195
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
libevent versions prior to 2.1.6-beta
Description
The issue is related to the
name parse function in evdns.c, which allows remote attackers to have an unspecified impact via vectors involving the label len variable. This triggers an out-of-bounds stack read.Recommendations
For versions prior to 2.1.6-beta, update to version 2.1.6-beta or later to resolve the issue. As a temporary workaround, consider restricting access to the
name parse function in evdns.c to minimize the risk of exploitation.Exploit
Correção
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Suse
Ubuntu
Libevent