FlawAtlas
Search the atlas
SUSE-SU-2018:0200-1 Not scored

Security update for libevent

This update for libevent fixes the following security issues: - CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) - CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) - CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919)

Exploit probability Not scored
Published January 24, 2018
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 SP2 libevent
SUSE:Linux Enterprise Desktop 12 SP3 libevent
SUSE:Linux Enterprise Server 12 SP2 libevent
SUSE:Linux Enterprise Server 12 SP3 libevent
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 libevent
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 libevent
SUSE:Linux Enterprise Server for SAP Applications 12 SP3 libevent
SUSE:Linux Enterprise Software Development Kit 12 SP2 libevent
SUSE:Linux Enterprise Software Development Kit 12 SP3 libevent

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2018:0200-1

This update for libevent fixes the following security issues: - CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) - CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) - CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919)

View original source

05 / REFERENCES

Further evidence