medium5.5
CVE-2016-5824
libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
Impact
libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Libical Project | Libical | Version 1.0 |
| Canonical | Ubuntu Linux | Versions 14.04, 16.04, 18.04, 18.10 |
| Redhat | Enterprise Linux Desktop | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server | Versions 6.0, 7.0 |
| Redhat | Enterprise Linux Server Aus | Version 7.6 |
| Redhat | Enterprise Linux Server Eus | Version 7.6 |
| Redhat | Enterprise Linux Server Tus | Version 7.6 |
| Redhat | Enterprise Linux Workstation | Versions 6.0, 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2016/06/25/4
- http://www.openwall.com/lists/oss-security/2017/01/20/16
- http://www.securityfocus.com/bid/91459
- https://access.redhat.com/errata/RHSA-2019:0269
- https://access.redhat.com/errata/RHSA-2019:0270
- https://bugzilla.mozilla.org/show_bug.cgi?id=1275400
- https://github.com/libical/libical/issues/235
- https://github.com/libical/libical/issues/251
- https://github.com/libical/libical/issues/286
- https://security.gentoo.org/glsa/201904-02
- https://security.gentoo.org/glsa/201904-07
- https://usn.ubuntu.com/3897-1/
- http://www.openwall.com/lists/oss-security/2016/06/25/4
- http://www.openwall.com/lists/oss-security/2017/01/20/16
- http://www.securityfocus.com/bid/91459
- https://access.redhat.com/errata/RHSA-2019:0269
- https://access.redhat.com/errata/RHSA-2019:0270
- https://bugzilla.mozilla.org/show_bug.cgi?id=1275400
- https://github.com/libical/libical/issues/235
- https://github.com/libical/libical/issues/251
- https://github.com/libical/libical/issues/286
- https://security.gentoo.org/glsa/201904-02
- https://security.gentoo.org/glsa/201904-07
- https://usn.ubuntu.com/3897-1/