SUSE CVE-2016-5826

The parsergetnextchar function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read by crafting a string to the icalparserparsestring function...

SUSE CVE-2016-9584

libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file...

libical:libical_fuzzer: Stack-buffer-overflow in simple_str_to_doublestr

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=6656638058102784 Project: libical Fuzzing Engine: afl Fuzz Target: libicalfuzzer Job Type: aflasanlibical Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fffdf0a53c0...

new packages: libical

An update is available for libical. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.0...

Mageia: Security Advisory (MGASA-2018-0021)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libical:libical_fuzzer: Dynamic-stack-buffer-overflow in icalvalue_new_recur

Project: https://github.com/libical/libical.git Detailed Report: https://oss-fuzz.com/testcase?key=4612277125906432 Project: libical Fuzzing Engine: afl Fuzz Target: libicalfuzzer Job Type: aflasanlibical Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ Crash Address:...

SUSE: Security Advisory (SUSE-SU-2018:0119-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:1989-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-11705

A flaw in Thunderbird's implementation of iCal causes a stack buffer overflow in icalrecuraddbydayrules when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7.1. Mitigation Thunderbird can be configured to use icaljs inste...

CVE-2019-11704

A flaw in Thunderbird's implementation of iCal causes a heap buffer overflow in icalmemorystrdupanddequote when processing certain email messages, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird 60.7.1. Mitigation Thunderbird can be configured to use icaljs...

Huawei EulerOS: Security Advisory for libical (EulerOS-SA-2019-1915)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libical (EulerOS-SA-2019-2457)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for libical (EulerOS-SA-2019-2607)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : libical (EulerOS-SA-2019-2607)

According to the versions of the libical packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file.CVE-2016-9584 ...

EulerOS 2.0 SP2 : libical (EulerOS-SA-2019-2457)

According to the versions of the libical packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The icaltimefromstring function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service out-of-bounds heap read via a...

Thunderbird libical DoS

The vulnerability of the Thunderbird email client’s libical library is related to the overflow of the icalrecuraddbydayrules stack buffer when processing certain email messages. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Thunderbird libical Type Checking DoS

The vulnerability of the Thunderbird email client’s libical library is related to the lack of type checking during the processing of certain email messages. Exploiting this vulnerability can allow an attacker to cause service failures...

EulerOS 2.0 SP5 : libical (EulerOS-SA-2019-1915)

According to the version of the libical packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libical allows remote attackers to cause a denial of service use-after-free and possibly read heap memory via a crafted ics file.CVE-2016-9584 Not...

NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0093)

The remote NewStart CGSL host, running version MAIN 4.06, has thunderbird packages installed that are affected by multiple vulnerabilities: - libical 1.0 allows remote attackers to cause a denial of service use-after-free via a crafted ics file. CVE-2016-5824 - A use-after-free vulnerability can...

Amazon Linux 2 : thunderbird (ALAS-2019-1250)

libical: Heap buffer over read in icalparser.c parsergetnextchar CVE-2019-11703 libical: Type confusion in icaltimezonegetvtimezoneproperties function in icalproperty.c CVE-2019-11706 Mozilla: Sandbox escape using Prompt:Open CVE-2019-11708 libical: Stack buffer overflow in icalrecuraddbydayrules...