Lucene search

MitreCVE-2016-10197

HistoryMar 15, 2017 - 3:59 p.m.

CVE-2016-10197

2017-03-1515:59:00

CWE-125

mitre

web.nvd.nist.gov

108

cve

2016

10197

libevent

denial of service

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

8.2

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.

Affected configurations

Nvd

Node

debiandebian_linuxMatch8.0

Node

libevent_projectlibeventRange≤2.1.5

VendorProductVersionCPE
debiandebian_linux8.0cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
libevent_projectlibevent*cpe:2.3:a:libevent_project:libevent:*:*:*:*:*:*:*:*