Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debianDebianDEBIAN:DLA-824-1:B4FC3
HistoryFeb 15, 2017 - 3:22 p.m.

[SECURITY] [DLA 824-1] libevent security update

2017-02-1515:22:26
lists.debian.org
25

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON

Package : libevent
Version : 2.0.19-stable-3+deb7u2
CVE ID : CVE-2016-10195 CVE-2016-10196 CVE-2016-10197
Debian Bug : 854092

Several vulnerabilities were discovered in libevent, an asynchronous
event notification library. They would lead to Denial Of Service via
application crash, or remote code execution.

For Debian 7 "Wheezy", these problems have been fixed in version
2.0.19-stable-3+deb7u2.

We recommend that you upgrade your libevent packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS

OSVersionArchitecturePackageVersionFilename
Debian8armhflibevent-2.0-5< 2.0.21-stable-2+deb8u1libevent-2.0-5_2.0.21-stable-2+deb8u1_armhf.deb
Debian7i386libevent-pthreads-2.0-5< 2.0.19-stable-3+deb7u2libevent-pthreads-2.0-5_2.0.19-stable-3+deb7u2_i386.deb
Debian7armhflibevent-core-2.0-5< 2.0.19-stable-3+deb7u2libevent-core-2.0-5_2.0.19-stable-3+deb7u2_armhf.deb
Debian8kfreebsd-i386libevent-dev< 2.0.21-stable-2+deb8u1libevent-dev_2.0.21-stable-2+deb8u1_kfreebsd-i386.deb
Debian8mipslibevent-openssl-2.0-5< 2.0.21-stable-2+deb8u1libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_mips.deb
Debian8mipsellibevent-extra-2.0-5< 2.0.21-stable-2+deb8u1libevent-extra-2.0-5_2.0.21-stable-2+deb8u1_mipsel.deb
Debian8s390xlibevent-dbg< 2.0.21-stable-2+deb8u1libevent-dbg_2.0.21-stable-2+deb8u1_s390x.deb
Debian8armhflibevent-openssl-2.0-5< 2.0.21-stable-2+deb8u1libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_armhf.deb
Debian8mipsellibevent-openssl-2.0-5< 2.0.21-stable-2+deb8u1libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_mipsel.deb
Debian8kfreebsd-amd64libevent-openssl-2.0-5< 2.0.21-stable-2+deb8u1libevent-openssl-2.0-5_2.0.21-stable-2+deb8u1_kfreebsd-amd64.deb
Rows per page:
1-10 of 1141

Related

nessus 52
osv 5
huawei 1
openvas 20
freebsd 1
debian 2
ubuntu 2
gentoo 2
cloudfoundry 1
mageia 2
nvd 4
redhatcve 1
cve 4
photon 4
rosalinux 1
veracode 3
ubuntucve 3
debiancve 3
prion 3
alpinelinux 3
cvelist 3
centos 3
mozilla 4
redhat 3
oraclelinux 1
kaspersky 2
archlinux 1
altlinux 2
suse 2
nessus
nessus
GLSA-201705-01 : libevent: Multiple vulnerabilities
2017-05-08 00:00:00
Debian DLA-824-1 : libevent security update
2017-02-16 00:00:00
openSUSE Security Update : libevent (openSUSE-2018-95)
2018-01-26 00:00:00
osv
osv
libevent - security update
2017-02-15 00:00:00
libevent - security update
2017-02-15 00:00:00
CVE-2016-10195
2017-03-15 15:59:00
huawei
huawei
Security Advisory - Three Vulnerabilities in Huawei GaussDB
2017-10-25 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for libevent (EulerOS-SA-2017-1091)
2020-01-23 00:00:00
Mageia: Security Advisory (MGASA-2017-0066)
2022-01-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2018:0263-1)
2021-06-09 00:00:00
freebsd
freebsd
libevent -- multiple vulnerabilities
2017-01-31 00:00:00
debian
debian
[SECURITY] [DSA 3789-1] libevent security update
2017-02-15 14:20:08
[SECURITY] [DSA 3789-1] libevent security update
2017-02-15 14:20:08
ubuntu
ubuntu
libevent vulnerabilities
2017-03-13 00:00:00
Thunderbird vulnerabilities
2017-05-16 00:00:00
gentoo
gentoo
libevent: Multiple vulnerabilities
2017-05-07 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2018-02-20 00:00:00
cloudfoundry
cloudfoundry
USN-3228-1: libevent vulnerabilities | Cloud Foundry
2017-03-31 00:00:00
mageia
mageia
Updated libevent packages fix security vulnerability
2017-02-27 01:02:17
Updated iceape packages fix security vulnerabilities
2018-01-02 14:48:29
nvd
nvd
CVE-2017-5437
2017-04-25 21:59:00
CVE-2016-10195
2017-03-15 15:59:00
CVE-2016-10197
2017-03-15 15:59:00
redhatcve
redhatcve
CVE-2017-5437
2017-04-20 06:20:11
cve
cve
CVE-2017-5437
2017-04-25 21:59:00
CVE-2016-10196
2017-03-15 15:59:00
CVE-2016-10195
2017-03-15 15:59:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-4.0-0379
2023-04-19 00:00:00
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2017-0013
2017-04-24 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0031
2023-06-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1869
2021-07-02 17:13:48
veracode
veracode
Stack-based Buffer Overflow
2019-05-02 06:09:59
Out-of-bounds Read
2019-05-02 06:09:59
Arbitrary Code Execution
2019-01-15 09:16:29
ubuntucve
ubuntucve
CVE-2016-10196
2016-12-31 00:00:00
CVE-2016-10197
2016-12-31 00:00:00
CVE-2016-10195
2016-12-31 00:00:00
debiancve
debiancve
CVE-2016-10195
2017-03-15 15:59:00
CVE-2016-10197
2017-03-15 15:59:00
CVE-2016-10196
2017-03-15 15:59:00
prion
prion
Stack overflow
2017-03-15 15:59:00
Out-of-bounds
2017-03-15 15:59:00
Out-of-bounds
2017-03-15 15:59:00
alpinelinux
alpinelinux
CVE-2016-10195
2017-03-15 15:59:00
CVE-2016-10197
2017-03-15 15:59:00
CVE-2016-10196
2017-03-15 15:59:00
cvelist
cvelist
CVE-2016-10197
2017-03-15 15:00:00
CVE-2016-10196
2017-03-15 15:00:00
CVE-2016-10195
2017-03-15 15:00:00
centos
centos
firefox security update
2017-04-20 22:44:21
thunderbird security update
2017-05-09 17:01:33
firefox security update
2017-04-20 23:21:25
mozilla
mozilla
Security vulnerabilities fixed in Firefox ESR 45.9 — Mozilla
2017-04-19 00:00:00
Security vulnerabilities fixed in Thunderbird 52.1 — Mozilla
2017-04-30 00:00:00
Security vulnerabilities fixed in Firefox ESR 52.1 — Mozilla
2017-04-19 00:00:00
redhat
redhat
(RHSA-2017:1201) Important: thunderbird security update
2017-05-08 05:16:37
(RHSA-2017:1104) Critical: firefox security update
2017-04-20 06:59:53
(RHSA-2017:1106) Critical: firefox security update
2017-04-20 08:50:13
oraclelinux
oraclelinux
thunderbird security update
2017-05-08 00:00:00
kaspersky
kaspersky
KLA11007 Multiple vulnerabilities in Mozilla Thunderbird
2017-04-30 00:00:00
KLA11004 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR
2017-04-19 00:00:00
archlinux
archlinux
[ASA-201704-6] firefox: multiple issues
2017-04-21 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 52.1.1-alt1
2017-05-08 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 52.1.0-alt1
2017-05-02 00:00:00
suse
suse
Security update for MozillaFirefox, MozillaFirefox-branding-SLE (important)
2017-06-26 12:10:28
Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss (important)
2017-08-22 21:08:17

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.006

Percentile

79.4%

JSON
Related for DEBIAN:DLA-824-1:B4FC3
nessus52osv5huawei1openvas20freebsd1debian2ubuntu2gentoo2cloudfoundry1mageia2nvd4redhatcve1cve4photon4rosalinux1veracode3ubuntucve3debiancve3prion3alpinelinux3cvelist3centos3mozilla4redhat3oraclelinux1kaspersky2archlinux1altlinux2suse2