CVE Catalog
CVE-2016-10195
CriticalSummary
The name_parse function in evdns.c in libevent before version 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, leading to an out-of-bounds stack read.
Risk Assessment
Attackers may exploit this vulnerability to gain access to sensitive data in memory, potentially leading to further attacks on the system.
Recommendation
It is recommended to update libevent to version 2.1.6-beta or later to mitigate this vulnerability.
Original NVD description (English source)
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.