Published: 27/01/2017 Updated: 02/04/2019

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

libical 1.0 allows remote malicious users to cause a denial of service (use-after-free) via a crafted ics file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
libical project libical 1.0
canonical ubuntu linux 18.04
canonical ubuntu linux 18.10
canonical ubuntu linux 14.04
canonical ubuntu linux 16.04
redhat enterprise linux desktop 7.0
redhat enterprise linux workstation 7.0
redhat enterprise linux desktop 6.0
redhat enterprise linux workstation 6.0
redhat enterprise linux server 7.0
redhat enterprise linux server aus 7.6
redhat enterprise linux server eus 7.6
redhat enterprise linux server 6.0
redhat enterprise linux server tus 7.6

Debian Bug report logs - #860451 libical: CVE-2016-5824 Package: src:libical; Maintainer for src:libical is Fathi Boudra <fabo@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Mon, 17 Apr 2017 06:33:02 UTC Severity: important Tags: fixed-upstream, security, upstream Found in versions libical/ ...

Several security issues were fixed in Thunderbird ...

Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 6Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...

Synopsis Important: thunderbird security update Type/Severity Security Advisory: Important Topic An update for thunderbird is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability Scoring System (CVSS) bas ...

Mozilla Foundation Security Advisory 2019-03 Security vulnerabilities fixed in Thunderbird 605 Announced January 29, 2019 Impact critical Products Thunderbird Fixed in Thunderbird 605 ...

libical 10 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file ...

CWE-416 https://github.com/libical/libical/issues/286 https://github.com/libical/libical/issues/251 https://github.com/libical/libical/issues/235 https://bugzilla.mozilla.org/show_bug.cgi?id=1275400 http://www.openwall.com/lists/oss-security/2017/01/20/16 http://www.openwall.com/lists/oss-security/2016/06/25/4 http://www.securityfocus.com/bid/91459 https://access.redhat.com/errata/RHSA-2019:0270 https://access.redhat.com/errata/RHSA-2019:0269 https://usn.ubuntu.com/3897-1/https://security.gentoo.org/glsa/201904-07 https://security.gentoo.org/glsa/201904-02 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=860451 https://usn.ubuntu.com/3897-1/https://nvd.nist.gov

CVE-2016-5824

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect