{"id":"CVE-2016-10197","aliases":["ALPINE-CVE-2016-10197","BELL-CVE-2016-10197","CLSA-2025-1739388106","CLSA-2026-1792440745","DEBIAN-CVE-2016-10197","DLA-824-1","DSA-3789-1","EUVD-2016-1382","GHSA-p9p6-m8vm-vcxx","MGASA-2017-0066","RHSA-2017:1104","RHSA-2017:1106","RHSA-2017:1201","SUSE-SU-2018:0200-1","SUSE-SU-2018:0263-1","UBUNTU-CVE-2016-10197","USN-3228-1","USN-3278-1"],"status":"published","title":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a...","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05192,"percentile":0.92524,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2016-12-31T00:00:00Z","modified":"2026-10-27T04:15:38Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.2","package":"libevent","fixed_in":["2.0.22-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.3","package":"libevent","fixed_in":["2.0.22-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.4","package":"libevent","fixed_in":["2.0.22-r1"],"sources":["osv"]},{"ecosystem":"Alpine:v3.5","package":"libevent","fixed_in":["2.0.22-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.6","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.7","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.8","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"libevent","fixed_in":["2.1.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libevent","fixed_in":["2.0.21-stable-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libevent","fixed_in":["2.0.21-stable-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libevent","fixed_in":["2.0.21-stable-3"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"firefox","fixed_in":["53.0+build6-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"libevent","fixed_in":["2.0.21-stable-1ubuntu1.14.04.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","fixed_in":["1:52.1.1+build1-0ubuntu0.14.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"firefox","fixed_in":["53.0+build6-0ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"libevent","fixed_in":["2.0.21-stable-2ubuntu0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","fixed_in":["1:52.1.1+build1-0ubuntu0.16.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r1"}]}]},{"source":"osv","ecosystem":"Alpine:v3.5","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.6","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.8","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.8-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libevent-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:7","package":"libevent-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libevent-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:RHEL:7","package":"libevent-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-4.el7.tuxcare.els1"}]}],"bundled":3},{"source":"osv","ecosystem":"Debian:12","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-3"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-stable-3+deb7u2"}]}],"versions":["2.0.19-stable-3","2.0.19-stable-3+deb7u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:8","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-2+deb8u1"}]}],"versions":["2.0.21-stable-2"],"bundled":3},{"source":"osv","ecosystem":"Mageia:5","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.22-1.1.mga5"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el6_9"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-2.el7_3"}]}],"bundled":33},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el6_9"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:52.1.0-1.el7_3"}]}],"bundled":29},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-6.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-24.24.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-24.24.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.4.5-24.24.3.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"53.0+build6-0ubuntu0.14.04.1"}]}],"versions":["24.0+build1-0ubuntu1","25.0+build3-0ubuntu0.13.10.1","28.0~b2+build1-0ubuntu2","28.0+build1-0ubuntu1","28.0+build2-0ubuntu1","28.0+build2-0ubuntu2","29.0+build1-0ubuntu0.14.04.2","30.0+build1-0ubuntu0.14.04.3","31.0+build1-0ubuntu0.14.04.1","32.0+build1-0ubuntu0.14.04.1","32.0.3+build1-0ubuntu0.14.04.1","33.0+build2-0ubuntu0.14.04.1","34.0+build2-0ubuntu0.14.04.1","35.0+build3-0ubuntu0.14.04.2","35.0.1+build1-0ubuntu0.14.04.1","36.0+build2-0ubuntu0.14.04.4","36.0.1+build2-0ubuntu0.14.04.1","36.0.4+build1-0ubuntu0.14.04.1","37.0+build2-0ubuntu0.14.04.1","37.0.1+build1-0ubuntu0.14.04.1","37.0.2+build1-0ubuntu0.14.04.1","38.0+build3-0ubuntu0.14.04.1","39.0+build5-0ubuntu0.14.04.1","39.0.3+build2-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.1","40.0+build4-0ubuntu0.14.04.4","40.0.3+build1-0ubuntu0.14.04.1","41.0+build3-0ubuntu0.14.04.1","41.0.1+build2-0ubuntu0.14.04.1","41.0.2+build2-0ubuntu0.14.04.1","42.0+build2-0ubuntu0.14.04.1","43.0+build1-0ubuntu0.14.04.1","43.0.4+build3-0ubuntu0.14.04.1","44.0+build3-0ubuntu0.14.04.1","44.0.1+build2-0ubuntu0.14.04.1","44.0.2+build1-0ubuntu0.14.04.1","45.0+build2-0ubuntu0.14.04.1","45.0.1+build1-0ubuntu0.14.04.2","45.0.2+build1-0ubuntu0.14.04.1","46.0+build5-0ubuntu0.14.04.2","46.0.1+build1-0ubuntu0.14.04.3","47.0+build3-0ubuntu0.14.04.1","48.0+build2-0ubuntu0.14.04.1","49.0+build4-0ubuntu0.14.04.1","49.0.2+build2-0ubuntu0.14.04.1","50.0+build2-0ubuntu0.14.04.2","50.0.2+build1-0ubuntu0.14.04.1","50.1.0+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.1","51.0.1+build2-0ubuntu0.14.04.2","52.0+build2-0ubuntu0.14.04.1","52.0.1+build2-0ubuntu0.14.04.1","52.0.2+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-1ubuntu1.14.04.2"}]}],"versions":["2.0.21-stable-1","2.0.21-stable-1ubuntu1","2.0.21-stable-1ubuntu1.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"53.0+build6-0ubuntu0.16.04.1"}]}],"versions":["41.0.2+build2-0ubuntu1","42.0+build2-0ubuntu1","44.0+build3-0ubuntu2","44.0.1+build1-0ubuntu1","44.0.2+build1-0ubuntu1","45.0+build2-0ubuntu1","45.0.1+build1-0ubuntu1","45.0.2+build1-0ubuntu1","46.0+build5-0ubuntu0.16.04.2","46.0.1+build1-0ubuntu0.16.04.2","47.0+build3-0ubuntu0.16.04.1","48.0+build2-0ubuntu0.16.04.1","49.0+build4-0ubuntu0.16.04.1","49.0.2+build2-0ubuntu0.16.04.2","50.0+build2-0ubuntu0.16.04.2","50.0.2+build1-0ubuntu0.16.04.1","50.1.0+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.1","51.0.1+build2-0ubuntu0.16.04.2","52.0+build2-0ubuntu0.16.04.1","52.0.1+build2-0ubuntu0.16.04.1","52.0.2+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-2ubuntu0.16.04.1"}]}],"versions":["2.0.21-stable-2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-1ubuntu1.14.04.2"}]}],"versions":["2.0.21-stable-1","2.0.21-stable-1ubuntu1","2.0.21-stable-1ubuntu1.14.04.1"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"libevent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-stable-2ubuntu0.16.04.1"}]}],"versions":["2.0.21-stable-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.14.04.1"}]}],"versions":["1:24.0+build1-0ubuntu1","1:24.0+build1-0ubuntu2","1:24.1.1+build1-0ubuntu0.13.10.1","1:24.1.1+build1-0ubuntu1","1:24.2.0+build1-0ubuntu1","1:24.4.0+build1-0ubuntu1","1:24.5.0+build1-0ubuntu0.14.04.1","1:24.6.0+build1-0ubuntu0.14.04.1","1:31.0+build1-0ubuntu0.14.04.1","1:31.1.1+build1-0ubuntu0.14.04.1","1:31.1.2+build1-0ubuntu0.14.04.1","1:31.2.0+build2-0ubuntu0.14.04.1","1:31.3.0+build1-0ubuntu0.14.04.1","1:31.4.0+build1-0ubuntu0.14.04.1","1:31.5.0+build1-0ubuntu0.14.04.1","1:31.6.0+build1-0ubuntu0.14.04.1","1:31.7.0+build1-0ubuntu0.14.04.1","1:31.8.0+build1-0ubuntu0.14.04.1","1:38.2.0+build1-0ubuntu0.14.04.1","1:38.3.0+build1-0ubuntu0.14.04.1","1:38.4.0+build3-0ubuntu0.14.04.1","1:38.5.1+build2-0ubuntu0.14.04.1","1:38.6.0+build1-0ubuntu0.14.04.1","1:38.7.2+build1-0ubuntu0.14.04.1","1:38.8.0+build1-0ubuntu0.14.04.1","1:45.2.0+build1-0ubuntu0.14.04.3","1:45.3.0+build1-0ubuntu0.14.04.4","1:45.4.0+build1-0ubuntu0.14.04.1","1:45.5.1+build1-0ubuntu0.14.04.1","1:45.7.0+build1-0ubuntu0.14.04.1","1:45.8.0+build1-0ubuntu0.14.04.1"],"bundled":33},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:52.1.1+build1-0ubuntu0.16.04.1"}]}],"versions":["1:38.3.0+build1-0ubuntu2","1:38.5.1+build2-0ubuntu1","1:38.6.0+build1-0ubuntu1","1:38.7.2+build1-0ubuntu0.16.04.1","1:38.8.0+build1-0ubuntu0.16.04.1","1:45.2.0+build1-0ubuntu0.16.04.1","1:45.3.0+build1-0ubuntu0.16.04.2","1:45.4.0+build1-0ubuntu0.16.04.1","1:45.5.1+build1-0ubuntu0.16.04.1","1:45.7.0+build1-0ubuntu0.16.04.1","1:45.8.0+build1-0ubuntu0.16.04.1"],"bundled":33}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"libevent_project","product":"libevent"}],"references":[{"url":"http://www.securityfocus.com/bid/96014","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1106","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.debian.org/security/2017/dsa-3789","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2017/02/02/7","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201705-01","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/libevent/libevent/issues/332","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2017/01/31/17","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory","web","report"]},{"url":"http://www.securitytracker.com/id/1038320","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://github.com/libevent/libevent/blob/release-2.1.6-beta/ChangeLog","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1104","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2017:1201","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10197","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-p9p6-m8vm-vcxx"},{"url":"https://security.alpinelinux.org/vuln/CVE-2016-10197","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-10197","tags":["advisory"]},{"url":"https://errata.tuxcare.com/centos7-els/CLSA-2025-1739388106.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792440745.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10196","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-10197","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2017-0066.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=20233","tags":["report"]},{"url":"http://openwall.com/lists/oss-security/2017/02/02/7","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-08","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443301","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443315","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443317","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443328","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443333","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1104.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418608","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-10195","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10196","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-10197","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1418612","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-10197","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5429","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5429","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5429","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5429","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5432","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5432","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5432","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5432","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5433","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5433","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5433","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5433","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5434","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5434","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5434","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5434","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5435","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5435","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5436","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5436","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5436","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5436","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5438","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5438","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5439","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5439","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5440","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5440","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5440","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5440","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5441","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5441","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5441","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5441","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5442","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5442","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5442","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5442","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5443","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5443","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5443","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5444","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5444","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5444","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5444","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5445","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5445","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5445","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5445","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5446","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5446","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5446","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5446","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5447","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5447","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5447","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5447","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5448","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5448","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5448","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5448","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5449","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5449","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5449","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5449","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5459","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5459","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5459","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5459","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5460","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5460","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5460","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5460","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5464","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5464","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5465","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5465","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5465","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5469","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5469","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5469","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5469","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-12","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443305","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443334","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1443340","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1106.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5430","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5430","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5430","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5430","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5451","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5451","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5454","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5454","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5454","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5454","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5455","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5455","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5455","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5455","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5456","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5456","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5456","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5466","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5466","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5466","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5466","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-5467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-5467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-5467","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-11/#CVE-2017-5467","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-13","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1201.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180200-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1022917","tags":["report"]},{"url":"https://bugzilla.suse.com/1022918","tags":["report"]},{"url":"https://bugzilla.suse.com/1022919","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10195","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10196","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-10197","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20180263-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10197","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3228-1","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/","tags":["report"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2017-13/","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3278-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-10195","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2016-10196","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5429","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5430","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5432","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5433","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5434","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5435","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5436","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5437","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5438","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5439","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5440","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5441","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5442","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5443","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5444","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5445","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5446","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5447","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5449","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5451","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5454","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5459","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5460","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5461","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5462","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5464","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5465","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5466","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5467","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2017-5469","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2016-10197","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2017-03-15T15:00:00Z","modified":"2024-08-06T03:14:42.418Z","updated_at":"2026-11-02T14:33:31.450804Z"}],"euvd":[{"id":"EUVD-2016-1382","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2017-03-15T15:00:00Z","modified":"2024-08-06T03:14:42Z","updated_at":"2026-11-03T02:22:24.738409Z"}],"ghsa":[{"id":"GHSA-p9p6-m8vm-vcxx","title":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a...","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2022-05-13T01:04:13Z","modified":"2023-02-01T05:02:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:49:57.916243Z"}],"nvd":[{"id":"CVE-2016-10197","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2017-03-15T15:59:00.5Z","modified":"2026-06-17T00:39:15.833Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:03:37.238712Z"}],"osv":[{"id":"ALPINE-CVE-2016-10197","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2017-03-15T15:59:00.5Z","modified":"2026-09-22T06:17:50.313155652Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:46.318571Z"},{"id":"BELL-CVE-2016-10197","title":"CVE-2016-10197 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:15:43.841164Z","modified":"2026-01-26T09:50:04.676721Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-10197","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2017-03-15T15:59:00.5Z","modified":"2026-10-20T13:13:20.321309625Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-10197","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2017-03-15T15:59:00.5Z","modified":"2026-09-22T07:02:53.084433035Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"RHSA-2017:1104","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:15:30Z","modified":"2026-10-17T10:01:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1106","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T00:15:35Z","modified":"2026-10-17T10:01:21Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"RHSA-2017:1201","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T00:15:24Z","modified":"2026-10-17T10:01:22Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2016-10197","description":"The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.","status":"published","published":"2016-12-31T00:00:00Z","modified":"2026-04-22T10:29:25.051615Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:11.492576Z"},{"id":"CLSA-2025-1739388106","title":"libevent: Fix of 3 CVEs","description":"- CVE-2016-10195: fix an out-of-bounds stack read in the name_parse function\n- CVE-2016-10196: fix a stack-based buffer overflow in the\n  evutil_parse_sockaddr_port function\n- CVE-2016-10197: fix DoS via an empty hostname in the search_make_new function","status":"published","published":"2025-02-12T19:21:52Z","modified":"2026-06-01T00:33:17.804287015Z","updated_at":"2026-11-02T15:43:41.281406Z"},{"id":"CLSA-2026-1792440745","title":"libevent: Fix of 2 CVEs","description":"- CVE-2016-10195: fix an out-of-bounds stack read in the name_parse function\n- CVE-2016-10196: fix a stack-based buffer overflow in the\n  evutil_parse_sockaddr_port function\n- CVE-2016-10197: fix DoS via an empty hostname in the search_make_new function","status":"published","published":"2026-10-19T20:12:37Z","modified":"2026-10-26T09:31:59.479830452Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"DLA-824-1","title":"libevent - security update","status":"published","published":"2017-02-15T00:00:00Z","modified":"2026-03-09T02:09:56.294948Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3789-1","title":"libevent - security update","status":"published","published":"2017-02-15T00:00:00Z","modified":"2026-03-09T01:18:58.694891Z","updated_at":"2026-11-02T15:46:16.523846Z"},{"id":"MGASA-2017-0066","title":"Updated libevent packages fix security vulnerability","description":"* The DNS code of Libevent contains an OOB read which can trigger a crash\n  (CVE-2016-10197)\n* The libevent evutil_parse_sockaddr_port() contains a buffer overflow\n  which can cause a segmentation fault (CVE-2016-10196)\n* The name_parse() function in libevent's DNS code is vulnerable to a\n  buffer overread (CVE-2016-10195)\n","status":"published","published":"2017-02-26T22:02:17Z","modified":"2026-04-16T06:24:18.221003298Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"SUSE-SU-2018:0200-1","title":"Security update for libevent","description":"This update for libevent fixes the following security issues:\n\n- CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) \n- CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) \n- CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919) \n","status":"published","published":"2018-01-24T16:37:26Z","modified":"2026-02-04T02:50:38.384471Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"SUSE-SU-2018:0263-1","title":"Security update for libevent","description":"This update for libevent fixes the following issues:\n\n- CVE-2016-10195: DNS remote stack overread vulnerability (bsc#1022917) \n- CVE-2016-10196: stack/buffer overflow in evutil_parse_sockaddr_port() (bsc#1022918) (backport for 2.0.21)\n- CVE-2016-10197: out-of-bounds read in search_make_new() (bsc#1022919) \n","status":"published","published":"2018-01-29T13:36:44Z","modified":"2026-02-04T02:21:50.228075Z","updated_at":"2026-11-02T15:53:44.594517Z"},{"id":"USN-3228-1","title":"libevent vulnerabilities","description":"Guido Vranken discovered that libevent incorrectly handled memory when\nprocessing certain data. A remote attacker could possibly use this issue\nwith an application that uses libevent to cause a denial of service, or\npossibly execute arbitrary code.\n","status":"published","published":"2017-03-13T16:48:55Z","modified":"2026-04-22T09:33:38.226204Z","updated_at":"2026-11-02T16:58:10.303275Z"},{"id":"USN-3278-1","title":"thunderbird vulnerabilities","description":"Multiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted message, an attacker could\npotentially exploit these to read uninitialized memory, cause a denial of\nservice via application crash, or execute arbitrary code. (CVE-2017-5429,\nCVE-2017-5430, CVE-2017-5436, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445,\nCVE-2017-5446, CVE-2017-5447, CVE-2017-5461, CVE-2017-5467)\n\nMultiple security issues were discovered in Thunderbird. If a user were\ntricked in to opening a specially crafted website in a browsing context,\nan attacker could potentially exploit these to spoof the addressbar\ncontents, conduct cross-site scripting (XSS) attacks, cause a denial of\nservice via application crash, or execute arbitrary code. (CVE-2017-5432,\nCVE-2017-5433, CVE-2017-5434, CVE-2017-5435, CVE-2017-5437, CVE-2017-5438,\nCVE-2017-5439, CVE-2017-5440, CVE-2017-5441, CVE-2017-5442, CVE-2017-5449,\nCVE-2017-5451, CVE-2017-5454, CVE-2017-5459, CVE-2017-5460, CVE-2017-5464,\nCVE-2017-5465, CVE-2017-5466, CVE-2017-5469, CVE-2016-10195,\nCVE-2016-10196, CVE-2016-10197)\n\nA flaw was discovered in the DRBG number generation in NSS. If an\nattacker were able to perform a machine-in-the-middle attack, this flaw\ncould potentially be exploited to view sensitive information.\n(CVE-2017-5462)\n","status":"published","published":"2017-05-16T22:31:37Z","modified":"2026-10-27T04:15:38.050814792Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}