{"id":"CVE-2016-10196","aliases":["ALPINE-CVE-2016-10196","BELL-CVE-2016-10196","CLSA-2025-1739388106","CLSA-2026-1792440745","DEBIAN-CVE-2016-10196","DLA-824-1","DSA-3789-1","EUVD-2016-1381","GHSA-c3jf-437c-9298","MGASA-2017-0066","MGASA-2018-0018","RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201","SUSE-SU-2017:1669-1","SUSE-SU-2017:2235-1","SUSE-SU-2018:0200-1","SUSE-SU-2018:0263-1","UBUNTU-CVE-2016-10196","USN-3228-1","USN-3278-1"],"status":"published","title":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05208,"percentile":0.92546,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-787"],"published":"2016-12-31T00:00:00Z","modified":"2026-10-27T04:15:38Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.2","package":"libevent","fixed_in":["2.0.22-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libevent","fixed_in":["2.0.22-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libevent","fixed_in":["2.0.22-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libevent","fixed_in":["2.0.22-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libevent","fixed_in":["2.0.21-stable-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libevent","fixed_in":["2.0.21-stable-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libevent","fixed_in":["2.0.21-stable-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"firefox","fixed_in":["53.0+build6-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libevent","fixed_in":["2.0.21-stable-1ubuntu1.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.1.1+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firefox","fixed_in":["53.0+build6-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libevent","fixed_in":["2.0.21-stable-2ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.1.1+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libevent-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libevent-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libevent-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libevent-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-3"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-stable-3+deb7u2"}]}],"versions":["2.0.19-stable-3","2.0.19-stable-3+deb7u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-2+deb8u1"}]}],"versions":["2.0.21-stable-2"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-1.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.49.1-3.mga5"}]}],"bundled":112},{"source":"osv","ecosystem":"Mageia:6","package":"iceape","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.49.1-3.mga6"}]}],"bundled":112},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 6","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-108.3"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"MozillaFirefox-branding-SLE","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-31.1"}]}],"bundled":50},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-72.5.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.5-47.3.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-72.5.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"MozillaFirefox-branding-SLED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-24.3.44"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"firefox-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"firefox-libffi-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Point of Sale 11 SP3","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.5-47.3.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-72.5.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"MozillaFirefox-branding-SLED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-24.3.44"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"firefox-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"firefox-libffi-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-LTSS","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.5-47.3.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-72.5.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"MozillaFirefox-branding-SLED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-24.3.44"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"firefox-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"firefox-libffi-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP3-TERADATA","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.5-47.3.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-72.5.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"MozillaFirefox-branding-SLED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-24.3.44"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"firefox-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"firefox-libffi-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.5-47.3.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52.2.0esr-72.5.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"MozillaFirefox-branding-SLED","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"52-24.3.44"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"firefox-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"firefox-libffi-gcc5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.3.1+r233831-7.1"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"mozilla-nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.29.5-47.3.2"}]}],"bundled":51},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-24.24.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-24.24.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-24.24.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"53.0+build6-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-1ubuntu1.14.04.2"}]}],"versions":["2.0.21-stable-1","2.0.21-stable-1ubuntu1","2.0.21-stable-1ubuntu1.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"53.0+build6-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-2ubuntu0.16.04.1"}]}],"versions":["2.0.21-stable-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-1ubuntu1.14.04.2"}]}],"versions":["2.0.21-stable-1","2.0.21-stable-1ubuntu1","2.0.21-stable-1ubuntu1.14.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-2ubuntu0.16.04.1"}]}],"versions":["2.0.21-stable-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1"],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1"],"bundled":33}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"libevent_project","product":"libevent"},{"vendor":"mozilla","product":"firefox"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"http://www.securityfocus.com/bid/96014","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1106","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-12/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3789","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/02/02/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-11/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201705-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-10/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-13/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/01/31/17","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web","report"]},{"url":"http://www.securitytracker.com/id/1038320","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1343453","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/libevent/libevent/issues/318","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1104","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1201","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10196","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-10"},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-11"},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-12"},{"url":"https://www.mozilla.org/security/advisories/mfsa2017-13"},{"url":"https://github.com/advisories/GHSA-c3jf-437c-9298"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-10196","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-10196","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1739388106.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792440745.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10197","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10196","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0066.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20233","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2017/02/02/7","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2018-0018.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=22283","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-05/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-19/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-22/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-25/","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-28/","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-08","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443333","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1104.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10196","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418612","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10197","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5429","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5429","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5432","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5432","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5433","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5433","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5434","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5434","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5435","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5435","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5436","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5436","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5438","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5438","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5439","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5439","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5440","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5440","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5441","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5441","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5441","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5442","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5442","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5442","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5443","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5443","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5444","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5444","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5445","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5445","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5446","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5446","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5447","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5447","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5447","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5448","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5448","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5449","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5449","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5459","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5459","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5460","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5460","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5464","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5464","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5465","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5465","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5469","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5469","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-12","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443340","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1106.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5430","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5430","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5451","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5451","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5454","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5454","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5455","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5455","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5455","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5456","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5456","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5456","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5466","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5466","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5467","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5467","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-13","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1201.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20171669-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1035082","tags":["report"]},{"url":"https://bugzilla.suse.com/1043960","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5429","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5430","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5432","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5433","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5434","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5439","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5440","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5444","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5445","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5446","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5447","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5448","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5449","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5451","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5454","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5455","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5456","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5459","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5460","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5461","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5462","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5464","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5465","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5466","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5467","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5469","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5470","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-5472","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7749","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7750","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7751","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7752","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7754","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7755","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7756","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7757","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7758","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7761","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7763","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7764","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7765","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7768","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7778","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20172235-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1025108","tags":["report"]},{"url":"https://bugzilla.suse.com/1031485","tags":["report"]},{"url":"https://bugzilla.suse.com/930392","tags":["report"]},{"url":"https://bugzilla.suse.com/930496","tags":["report"]},{"url":"https://bugzilla.suse.com/935510","tags":["report"]},{"url":"https://bugzilla.suse.com/939460","tags":["report"]},{"url":"https://bugzilla.suse.com/945842","tags":["report"]},{"url":"https://bugzilla.suse.com/953831","tags":["report"]},{"url":"https://bugzilla.suse.com/954002","tags":["report"]},{"url":"https://bugzilla.suse.com/955382","tags":["report"]},{"url":"https://bugzilla.suse.com/962765","tags":["report"]},{"url":"https://bugzilla.suse.com/964468","tags":["report"]},{"url":"https://bugzilla.suse.com/966220","tags":["report"]},{"url":"https://bugzilla.suse.com/968771","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5276","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180200-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1022917","tags":["report"]},{"url":"https://bugzilla.suse.com/1022918","tags":["report"]},{"url":"https://bugzilla.suse.com/1022919","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10197","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180263-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10196","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3228-1","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3278-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5469","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-10196","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2017-03-15T15:00:00Z","modified":"2024-08-06T03:14:42.884Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-1381","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2017-03-15T15:00:00Z","modified":"2024-08-06T03:14:42Z","updated_at":"2026-11-03T02:22:24.738409Z"}],"ghsa":[{"id":"GHSA-c3jf-437c-9298","title":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent...","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2022-05-13T01:04:13Z","modified":"2024-10-21T15:33:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:58:33.735007Z"}],"nvd":[{"id":"CVE-2016-10196","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2017-03-15T15:59:00.437Z","modified":"2026-06-17T00:39:15.647Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:03:37.238712Z"}],"osv":[{"id":"ALPINE-CVE-2016-10196","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2017-03-15T15:59:00.437Z","modified":"2026-09-22T06:17:50.312613722Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"BELL-CVE-2016-10196","title":"CVE-2016-10196 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:26.42548Z","modified":"2026-01-26T09:46:33.494938Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-10196","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2017-03-15T15:59:00.437Z","modified":"2026-10-20T13:14:35.133001428Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-10196","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2017-03-15T15:59:00.437Z","modified":"2026-09-22T07:02:53.369509804Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"RHSA-2017:1104","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:15:30Z","modified":"2026-10-17T10:01:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1106","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:15:35Z","modified":"2026-10-17T10:01:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1201","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T00:15:24Z","modified":"2026-10-17T10:01:22Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-10196","description":"Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.","status":"published","published":"2016-12-31T00:00:00Z","modified":"2026-04-22T10:29:42.155Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"CLSA-2025-1739388106","title":"libevent: Fix of 3 CVEs","description":"- CVE-2016-10195: fix an out-of-bounds stack read in the name_parse function\n- CVE-2016-10196: fix a stack-based buffer overflow in the\n  evutil_parse_sockaddr_port function\n- CVE-2016-10197: fix DoS via an empty hostname in the search_make_new function","status":"published","published":"2025-02-12T19:21:52Z","modified":"2026-06-01T00:33:17.804287015Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2026-1792440745","title":"libevent: Fix of 2 CVEs","description":"- CVE-2016-10195: fix an out-of-bounds stack read in the name_parse function\n- CVE-2016-10196: fix a stack-based buffer overflow in the\n  evutil_parse_sockaddr_port function\n- CVE-2016-10197: fix DoS via an empty hostname in the search_make_new function","status":"published","published":"2026-10-19T20:12:37Z","modified":"2026-10-26T09:31:59.479830452Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"DLA-824-1","title":"libevent - security update","status":"published","published":"2017-02-15T00:00:00Z","modified":"2026-03-09T02:09:56.294948Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3789-1","title":"libevent - security update","status":"published","published":"2017-02-15T00:00:00Z","modified":"2026-03-09T01:18:58.694891Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0066","title":"Updated libevent packages fix security vulnerability","description":"* The DNS code of Libevent contains an OOB read which can trigger a crash\n  (CVE-2016-10197)\n* The libevent evutil_parse_sockaddr_port() contains a buffer overflow\n  which can cause a segmentation fault (CVE-2016-10196)\n* The name_parse() function in libevent's DNS code is vulnerable to a\n  buffer overread (CVE-2016-10195)\n","status":"published","published":"2017-02-26T22:02:17Z","modified":"2026-04-16T06:24:18.221003298Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"MGASA-2018-0018","title":"Updated iceape packages fix security vulnerabilities","description":"Updated iceape packages include security fixes from upstream Seamonkey\nand Firefox:\n\nMultiple flaws were found in the way Iceape 2.48 processes various types\nof web content, where loading a web page containing malicious content\ncould cause Iceape to crash, execute arbitrary code, or disclose\nsensitive information. (CVE-2016-10196,CVE-2017-5398,CVE-2017-5399,\nCVE-2017-5400,CVE-2017-5401,CVE-2017-5402,CVE-2017-5403,CVE-2017-5404,\nCVE-2017-5405,CVE-2017-5406,CVE-2017-5407,CVE-2017-5409,CVE-2017-5410,\nCVE-2017-5411,CVE-2017-5408,CVE-2017-5412,CVE-2017-5413,CVE-2017-5414,\nCVE-2017-5415,CVE-2017-5416,CVE-2017-5417,CVE-2017-5425,CVE-2017-5426,\nCVE-2017-5427,CVE-2017-5418,CVE-2017-5419,CVE-2017-5420,CVE-2017-5421,\nCVE-2017-5422,CVE-2017-5429,CVE-2017-5430,CVE-2017-5432,CVE-2017-5433,\nCVE-2017-5434,CVE-2017-5435,CVE-2017-5436,CVE-2017-5438,CVE-2017-5439,\nCVE-2017-5440,CVE-2017-5441,CVE-2017-5442,CVE-2017-5443,CVE-2017-5444,\nCVE-2017-5445,CVE-2017-5446,CVE-2017-5447,CVE-2017-5448,CVE-2017-5449,\nCVE-2017-5451,CVE-2017-5454,CVE-2017-5455,CVE-2017-5456,CVE-2017-5459,\nCVE-2017-5460,CVE-2017-5461,CVE-2017-5462,CVE-2017-5464,CVE-2017-5465,\nCVE-2017-5466,CVE-2017-5467,CVE-2017-5469,CVE-2017-5470,CVE-2017-5472,\nCVE-2017-7749,CVE-2017-7750,CVE-2017-7751,CVE-2017-7752,CVE-2017-7753,\nCVE-2017-7754,CVE-2017-7755,CVE-2017-7756,CVE-2017-7757,CVE-2017-7758,\nCVE-2017-7760,CVE-2017-7761,CVE-2017-7763,CVE-2017-7764,CVE-2017-7765,\nCVE-2017-7766,CVE-2017-7767,CVE-2017-7768,CVE-2017-7778,CVE-2017-7779,\nCVE-2017-7782,CVE-2017-7784,CVE-2017-7785,CVE-2017-7786,CVE-2017-7787,\nCVE-2017-7791,CVE-2017-7792,CVE-2017-7793,CVE-2017-7798,CVE-2017-7800,\nCVE-2017-7801,CVE-2017-7802,CVE-2017-7803,CVE-2017-7804,CVE-2017-7805,\nCVE-2017-7807,CVE-2017-7809,CVE-2017-7810,CVE-2017-7814,CVE-2017-7818,\nCVE-2017-7819,CVE-2017-7823,CVE-2017-7824,CVE-2017-7825,CVE-2017-7826,\nCVE-2017-7828,CVE-2017-7830,CVE-2017-7843,CVE-2017-7845)\n","status":"published","published":"2018-01-02T11:48:29Z","modified":"2026-04-16T06:24:36.415771916Z","updated_at":"2026-11-02T15:49:40.442238Z"},{"id":"SUSE-SU-2017:1669-1","title":"Security update for MozillaFirefox, MozillaFirefox-branding-SLE","description":"The MozillaFirefox was updated to the new ESR 52.2 release, which fixes the following issues (bsc#1043960):\n\n* MFSA 2017-16/CVE-2017-7758\n  Out-of-bounds read in Opus encoder\n* MFSA 2017-16/CVE-2017-7749\n  Use-after-free during docshell reloading\n* MFSA 2017-16/CVE-2017-7751\n  Use-after-free with content viewer listeners\n* MFSA 2017-16/CVE-2017-5472\n  Use-after-free using destroyed node when regenerating trees\n* MFSA 2017-16/CVE-2017-5470\n  Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2\n* MFSA 2017-16/CVE-2017-7752\n  Use-after-free with IME input\n* MFSA 2017-16/CVE-2017-7750\n  Use-after-free with track elements\n* MFSA 2017-16/CVE-2017-7768\n  32 byte arbitrary file read through Mozilla Maintenance\n  Service\n* MFSA 2017-16/CVE-2017-7778\n  Vulnerabilities in the Graphite 2 library\n* MFSA 2017-16/CVE-2017-7754\n  Out-of-bounds read in WebGL with ImageInfo object\n* MFSA 2017-16/CVE-2017-7755\n  Privilege escalation through Firefox Installer with same\n  directory DLL files\n* MFSA 2017-16/CVE-2017-7756\n  Use-after-free and use-after-scope logging XHR header errors\n* MFSA 2017-16/CVE-2017-7757\n  Use-after-free in IndexedDB\n* MFSA 2017-16/CVE-2017-7761\n  File deletion and privilege escalation through Mozilla\n  Maintenance Service helper.exe application\n* MFSA 2017-16/CVE-2017-7763\n  Mac fonts render some unicode characters as spaces\n* MFSA 2017-16/CVE-2017-7765\n  Mark of the Web bypass when saving executable files\n* MFSA 2017-16/CVE-2017-7764\n  (bmo#1364283, bmo#http://www.unicode.org/reports/tr31/tr31-26\n   .html#Aspirational_Use_Scripts)\n  Domain spoofing with combination of Canadian Syllabics and\n  other unicode blocks\n\n- update to Firefox ESR 52.1 (bsc#1035082)\n* MFSA 2017-12/CVE-2016-10196\n  Vulnerabilities in Libevent library\n* MFSA 2017-12/CVE-2017-5443\n  Out-of-bounds write during BinHex decoding\n* MFSA 2017-12/CVE-2017-5429\n  Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and\n  Firefox ESR 52.1\n* MFSA 2017-12/CVE-2017-5464\n  Memory corruption with accessibility and DOM manipulation\n* MFSA 2017-12/CVE-2017-5465\n  Out-of-bounds read in ConvolvePixel\n* MFSA 2017-12/CVE-2017-5466\n  Origin confusion when reloading isolated data:text/html URL\n* MFSA 2017-12/CVE-2017-5467\n  Memory corruption when drawing Skia content\n* MFSA 2017-12/CVE-2017-5460\n  Use-after-free in frame selection\n* MFSA 2017-12/CVE-2017-5461\n  Out-of-bounds write in Base64 encoding in NSS\n* MFSA 2017-12/CVE-2017-5448\n  Out-of-bounds write in ClearKeyDecryptor\n* MFSA 2017-12/CVE-2017-5449\n  Crash during bidirectional unicode manipulation with\n  animation\n* MFSA 2017-12/CVE-2017-5446\n  Out-of-bounds read when HTTP/2 DATA frames are sent with\n  incorrect data\n* MFSA 2017-12/CVE-2017-5447\n  Out-of-bounds read during glyph processing\n* MFSA 2017-12/CVE-2017-5444\n  Buffer overflow while parsing application/http-index-format\n  content\n* MFSA 2017-12/CVE-2017-5445\n  Uninitialized values used while parsing application/http-\n  index-format content\n* MFSA 2017-12/CVE-2017-5442\n  Use-after-free during style changes\n* MFSA 2017-12/CVE-2017-5469\n  Potential Buffer overflow in flex-generated code\n* MFSA 2017-12/CVE-2017-5440\n  Use-after-free in txExecutionState destructor during XSLT\n  processing\n* MFSA 2017-12/CVE-2017-5441\n  Use-after-free with selection during scroll events\n* MFSA 2017-12/CVE-2017-5439\n  Use-after-free in nsTArray Length() during XSLT processing\n* MFSA 2017-12/CVE-2017-5438\n  Use-after-free in nsAutoPtr during XSLT processing\n* MFSA 2017-12/CVE-2017-5436\n  Out-of-bounds write with malicious font in Graphite 2\n* MFSA 2017-12/CVE-2017-5435\n  Use-after-free during transaction processing in the editor\n* MFSA 2017-12/CVE-2017-5434\n  Use-after-free during focus handling\n* MFSA 2017-12/CVE-2017-5433\n  Use-after-free in SMIL animation functions\n* MFSA 2017-12/CVE-2017-5432\n  Use-after-free in text input selection\n* MFSA 2017-12/CVE-2017-5430\n  Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1\n* MFSA 2017-12/CVE-2017-5459\n  Buffer overflow in WebGL\n* MFSA 2017-12/CVE-2017-5462\n  DRBG flaw in NSS\n* MFSA 2017-12/CVE-2017-5455\n  Sandbox escape through internal feed reader APIs\n* MFSA 2017-12/CVE-2017-5454\n  Sandbox escape allowing file system read access through file\n  picker\n* MFSA 2017-12/CVE-2017-5456\n  Sandbox escape allowing local file system access\n* MFSA 2017-12/CVE-2017-5451\n  Addressbar spoofing with onblur event\n\n","status":"published","published":"2017-06-26T06:11:53Z","modified":"2026-02-04T02:38:40.390542Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"SUSE-SU-2017:2235-1","title":"Security update for MozillaFirefox, MozillaFirefox-branding-SLED, firefox-gcc5, mozilla-nss","description":"This update for MozillaFirefox and mozilla-nss fixes the following issues:\n\nSecurity issues fixed:\n- Fixes in Firefox ESR 52.2 (bsc#1043960,MFSA 2017-16)\n  - CVE-2017-7758: Out-of-bounds read in Opus encoder\n  - CVE-2017-7749: Use-after-free during docshell reloading\n  - CVE-2017-7751: Use-after-free with content viewer listeners\n  - CVE-2017-5472: Use-after-free using destroyed node when regenerating trees\n  - CVE-2017-5470: Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2\n  - CVE-2017-7752: Use-after-free with IME input\n  - CVE-2017-7750: Use-after-free with track elements\n  - CVE-2017-7768: 32 byte arbitrary file read through Mozilla Maintenance Service\n  - CVE-2017-7778: Vulnerabilities in the Graphite 2 library\n  - CVE-2017-7754: Out-of-bounds read in WebGL with ImageInfo object\n  - CVE-2017-7755: Privilege escalation through Firefox Installer with same directory DLL files\n  - CVE-2017-7756: Use-after-free and use-after-scope logging XHR header errors\n  - CVE-2017-7757: Use-after-free in IndexedDB\n  - CVE-2017-7761: File deletion and privilege escalation through Mozilla Maintenance Service helper.exe application\n  - CVE-2017-7763: Mac fonts render some unicode characters as spaces\n  - CVE-2017-7765: Mark of the Web bypass when saving executable files\n  - CVE-2017-7764: Domain spoofing with combination of Canadian Syllabics and other unicode blocks\n\n- update to Firefox ESR 52.1 (bsc#1035082,MFSA 2017-12)\n  - CVE-2016-10196: Vulnerabilities in Libevent library\n  - CVE-2017-5443: Out-of-bounds write during BinHex decoding\n  - CVE-2017-5429: Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1\n  - CVE-2017-5464: Memory corruption with accessibility and DOM manipulation\n  - CVE-2017-5465: Out-of-bounds read in ConvolvePixel\n  - CVE-2017-5466: Origin confusion when reloading isolated data:text/html URL\n  - CVE-2017-5467: Memory corruption when drawing Skia content\n  - CVE-2017-5460: Use-after-free in frame selection\n  - CVE-2017-5461: Out-of-bounds write in Base64 encoding in NSS\n  - CVE-2017-5448: Out-of-bounds write in ClearKeyDecryptor\n  - CVE-2017-5449: Crash during bidirectional unicode manipulation with animation\n  - CVE-2017-5446: Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data\n  - CVE-2017-5447: Out-of-bounds read during glyph processing\n  - CVE-2017-5444: Buffer overflow while parsing application/http-index-format content\n  - CVE-2017-5445: Uninitialized values used while parsing application/http- index-format content\n  - CVE-2017-5442: Use-after-free during style changes\n  - CVE-2017-5469: Potential Buffer overflow in flex-generated code\n  - CVE-2017-5440: Use-after-free in txExecutionState destructor during XSLT processing\n  - CVE-2017-5441: Use-after-free with selection during scroll events\n  - CVE-2017-5439: Use-after-free in nsTArray Length() during XSLT processing\n  - CVE-2017-5438: Use-after-free in nsAutoPtr during XSLT processing\n  - CVE-2017-5436: Out-of-bounds write with malicious font in Graphite 2\n  - CVE-2017-5435: Use-after-free during transaction processing in the editor\n  - CVE-2017-5434: Use-after-free during focus handling\n  - CVE-2017-5433: Use-after-free in SMIL animation functions\n  - CVE-2017-5432: Use-after-free in text input selection\n  - CVE-2017-5430: Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1\n  - CVE-2017-5459: Buffer overflow in WebGL\n  - CVE-2017-5462: DRBG flaw in NSS\n  - CVE-2017-5455: Sandbox escape through internal feed reader APIs\n  - CVE-2017-5454: Sandbox escape allowing file system read access through file picker\n  - CVE-2017-5456: Sandbox escape allowing local file system access\n  - CVE-2017-5451: Addressbar spoofing with onblur event\n\n- General\n  - CVE-2015-5276: Fix for C++11 std::random_device short reads (bsc#945842)\n\nBugfixes:\n- workaround for Firefox hangs (bsc#1031485, bsc#1025108)\n- Update to gcc-5-branch head.\n  * Includes fixes for (bsc#966220), (bsc#962765), (bsc#964468), (bsc#939460),\n    (bsc#930496), (bsc#930392) and (bsc#955382).\n- Add fix to revert accidential libffi ABI breakage on AARCH64. (bsc#968771)\n- Build s390[x] with --with-tune=z9-109 --with-arch=z900 on SLE11 again. (bsc#954002)\n- Fix libffi include install.  (bsc#935510)\n","status":"published","published":"2017-08-22T13:32:21Z","modified":"2026-02-04T04:31:54.291589Z","updated_at":"2026-11-02T15:53:44.209561Z"},{"id":"SUSE-SU-2018:0200-1","title":"Security update for libevent","description":"This update for libevent fixes the following security issues:\n\n- CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) \n- CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) \n- CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919) \n","status":"published","published":"2018-01-24T16:37:26Z","modified":"2026-02-04T02:50:38.384471Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0263-1","title":"Security update for libevent","description":"This update for libevent fixes the following issues:\n\n- CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) \n- CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) (backport for 2.0.21)\n- CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919) \n","status":"published","published":"2018-01-29T13:36:44Z","modified":"2026-02-04T02:21:50.228075Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3228-1","title":"libevent vulnerabilities","description":"Guido Vranken discovered that libevent incorrectly handled memory when\nprocessing certain data. A remote attacker could possibly use this issue\nwith an application that uses libevent to cause a denial of service, or\npossibly execute arbitrary code.\n","status":"published","published":"2017-03-13T16:48:55Z","modified":"2026-04-22T09:33:38.226204Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3278-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted message, an attacker could\npotentially exploit these to read uninitialized memory, cause a denial of\nservice via application crash, or execute arbitrary code. (CVE-2017-5429,\nCVE-2017-5430, CVE-2017-5436, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445,\nCVE-2017-5446, CVE-2017-5447, CVE-2017-5461, CVE-2017-5467)\n\nMultiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to spoof the addressbar\ncontents, conduct cross-site scripting (XSS) attacks, cause a denial of\nservice via application crash, or execute arbitrary code. (CVE-2017-5432,\nCVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5437, CVE-2017-5438,\nCVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5449,\nCVE-2017-5451, CVE-2017-5454, CVE-2017-5459, CVE-2017-5460, CVE-2017-5464,\nCVE-2017-5465, CVE-2017-5466, CVE-2017-5469, CVE-2016-10195,\nCVE-2016-10196, CVE-2016-10197)\n\nA flaw was discovered in the DRBG number generation in NSS. If an\nattacker were able to perform a machine-in-the-middle attack, this flaw\ncould potentially be exploited to view sensitive information.\n(CVE-2017-5462)\n","status":"published","published":"2017-05-16T22:31:37Z","modified":"2026-10-27T04:15:38.050814792Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}