Linux Distros Unpatched Vulnerability : CVE-2016-5825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The icalparserparsestring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted ics file...

Linux Distros Unpatched Vulnerability : CVE-2016-9584

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file. CVE-2016-9584 Note that Nessus...

libical:libical_extended_fuzzer: Heap-use-after-free in icalreqstattype_as_string_r

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=5183821498089472 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalextendedfuzzer Job Type: libfuzzerasanlibical Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

libical:libical_fuzzer: Use-of-uninitialized-value in icalmemory_strdup

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=5491272529281024 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

libical: global-buffer-overflow in icaltime_timegm

With the following new fuzz target: include include include include include "/src/libical/src/libical/icalcomponent.h" extern "C" int LLVMFuzzerTestOneInputconst uint8t data, sizet size char icalstring = char mallocsize + 1; memcpyicalstring, data, size; icalstringsize = '\0'; icalcomponent comp ...

libical:libical_extended_fuzzer: Heap-use-after-free in icalreqstattype_as_string_r

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=4669019872690176 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalextendedfuzzer Job Type: libfuzzerasanlibical Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

OPENSUSE-SU-2024:10947-1 libical-devel-3.0.10-1.4 on GA media

These are all security issues fixed in the libical-devel-3.0.10-1.4 package on the GA media of openSUSE Tumbleweed...

libical:libical_fuzzer: Use-of-uninitialized-value in icalmemory_strdup

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=4508048994402304 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalfuzzer Job Type: libfuzzermsanlibical Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash...

RHEL 5 : libical (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Heap buffer over-read in icaltimefromstring CVE-2016-5827 - The icalparserparsestring function i...

RHEL 6 : libical (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Use-after-free CVE-2016-9584 - The icalparserparsestring function in libical 0.47 and 1.0 allows...

RHEL 7 : libical (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Use-after-free CVE-2016-9584 - The icalparserparsestring function in libical 0.47 and 1.0 allows...

RHEL 5 : thunderbird (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Multiple use-after-free vulnerabilities CVE-2016-5824 - The icalpropertynewclone function in...

RHEL 5 : libical (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Heap buffer over-read in icaltimefromstring CVE-2016-5827 - The icalpropertynewclone function in...

RHEL 6 : libical (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Stack buffer overflow in icalrecuraddbydayrules in icalrecur.c CVE-2019-11705 - The...

RHEL 7 : libical (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libical: Use-after-free CVE-2016-9584 - The icalpropertynewclone function in libical 0.47 and 1.0 allows...

libical:libical_extended_fuzzer: Heap-use-after-free in icalreqstattype_as_string_r

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=4864586701733888 Project: libical Fuzzing Engine: libFuzzer Fuzz Target: libicalextendedfuzzer Job Type: libfuzzerasanlibical Platform Id: linux Crash Type: Heap-use-after-free READ 2 Crash Address:...

SUSE CVE-2016-5823

The icalpropertynewclone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

SUSE CVE-2016-5824

libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file...

SUSE CVE-2016-5827

The icaltimefromstring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted string to the icalparserparsestring function...

SUSE CVE-2016-5826

The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...