Libeventrelease-2.0.22-stable: 1 vulnerabilities (highest severity is: 7.5) - autoclosed

[mend-for-github-com[bot]]

Vulnerable Library - Libeventrelease-2.0.22-stable

Event notification library

Library home page: https://github.com/nmathewson/Libevent.git

Found in HEAD commit: 0c45ce909374d16605095db4fce9a89b9b6bafd5

Vulnerable Source Files (1)

/release/src/router/lldpd-0.9.8/libevent/evutil.c

Vulnerabilities

CVE	Severity	CVSS	Dependency	Type	Fixed in (Libeventrelease version)	Remediation Available
CVE-2016-10196	High	7.5	Libeventrelease-2.0.22-stable	Direct	2.1.6	❌

Details

CVE-2016-10196

### Vulnerable Library - Libeventrelease-2.0.22-stable

Event notification library

Library home page: https://github.com/nmathewson/Libevent.git

Found in HEAD commit: 0c45ce909374d16605095db4fce9a89b9b6bafd5

Found in base branch: master

### Vulnerable Source Files (1)

/release/src/router/lldpd-0.9.8/libevent/evutil.c

### Vulnerability Details

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.

Publish Date: 2017-03-15

URL: CVE-2016-10196

### CVSS 3 Score Details (7.5)

Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High

For more information on CVSS3 Scores, click here.

### Suggested Fix

Type: Upgrade version

Origin: https://gitlab.alpinelinux.org/alpine/aports/issues/6797

Release Date: 2017-03-15

Fix Resolution: 2.1.6

[mend-for-github-com[bot]]

:information_source: This issue was automatically closed by Mend because it is a duplicate of an existing issue: #79

[mend-for-github-com[bot]]

:information_source: This issue was automatically closed by Mend because it is a duplicate of an existing issue: #79