CVE-2016-2090

Critical

Published: 13/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-2090 describes an off-by-one vulnerability in the fgetwln function in libbsd before version 0.8.2, allowing attackers to trigger a heap-based buffer overflow via unspecified vectors.

Risk Assessment

This vulnerability may lead to unpredictable consequences, including potential remote code execution, posing a serious security threat to systems using libbsd.

Recommendation

It is recommended to update libbsd to version 0.8.2 or later to mitigate this vulnerability.

Other vulnerabilities in libbsd

CVE-2019-20367Critical
nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).

Original NVD description (English source)

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS