| Package | Affected versions | Patched versions |
|---|---|---|
| libevent | ≤ 2.1.5 | |
| firefox | = 52.0< 45.9.0< 53.0 | 45.9.053.0 |
| thunderbird | < 52.1.0 | 52.1.0 |
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free