CVE-2016-5826
HighSummary
The parser_get_next_char function in libical versions 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.
Risk Assessment
An attacker can exploit this vulnerability to disrupt application functionality, potentially leading to service downtime.
Recommendation
It is recommended to update libical to the latest version to mitigate this vulnerability.
Other vulnerabilities in libical
See all- CVE-2016-5827High
The icaltime_from_string function in libical versions 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.
- CVE-2016-9584Critical
Libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
Original NVD description (English source)
The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.