SUSE-SU-2018:0263-1
Not scored
Security update for libevent
This update for libevent fixes the following issues: - CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) - CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) (backport for 2.0.21) - CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919)
Exploit probability
Not scored
Published
January 29, 2018
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2018:0263-1
View original source
This update for libevent fixes the following issues: - CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) - CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) (backport for 2.0.21) - CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1022917
- https://bugzilla.suse.com/1022918
- https://bugzilla.suse.com/1022919
- https://www.suse.com/security/cve/CVE-2016-10195
- https://www.suse.com/security/cve/CVE-2016-10196
- https://www.suse.com/security/cve/CVE-2016-10197
- https://www.suse.com/support/update/announcement/2018/suse-su-20180263-1/