Out-of-Bounds Stack Read Vulnerability in libevent's name_parse Function

CVE-2016-10195 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.

Learn more about our Web Application Penetration Testing UK.