CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-01-27

Last modified

2024-08-06

Weaknesses

CWE-416

Affected products

• Ubuntu Linux (Canonical)
• Libical (Libical Project)
• Enterprise Linux Desktop (Redhat)
• Enterprise Linux Server (Redhat)
• Enterprise Linux Server Aus (Redhat)
• Enterprise Linux Server Eus (Redhat)
• Enterprise Linux Server Tus (Redhat)
• Enterprise Linux Workstation (Redhat)

References

• http://www.openwall.com/lists/oss-security/2016/06/25/4
• http://www.openwall.com/lists/oss-security/2017/01/20/16
• http://www.securityfocus.com/bid/91459
• https://access.redhat.com/errata/RHSA-2019:0269
• https://access.redhat.com/errata/RHSA-2019:0270
• https://bugzilla.mozilla.org/show_bug.cgi?id=1275400
• https://github.com/libical/libical/issues/235
• https://github.com/libical/libical/issues/251
• https://github.com/libical/libical/issues/286
• https://security.gentoo.org/glsa/201904-02
• https://security.gentoo.org/glsa/201904-07
• https://usn.ubuntu.com/3897-1/