libical project records

6 published records for vendor libical project.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 100%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2016-9584No exploit	libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.libical project · libical · CWE-416 Pre-auth Memory safety	Critical9.1	—	2.3%	Jan 18, 2017
31Monitor	CVE-2016-5826No exploit	The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by libical project · libical · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	3.1%	Jan 27, 2017
31Monitor	CVE-2016-5827No exploit	The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) vialibical project · libical · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	3.0%	Jan 27, 2017
23Monitor	CVE-2016-5824No exploit	libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.libical project · libical · CWE-416 Memory safety Denial of service	Medium5.5	—	2.1%	Jan 27, 2017
22Monitor	CVE-2016-5825No exploit	The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) libical project · libical · CWE-125 Memory safety Denial of service	Medium5.5	—	1.5%	Jan 27, 2017
22Monitor	CVE-2016-5823No exploit	The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a craflibical project · libical · CWE-416 Memory safety Denial of service	Medium5.5	—	1.0%	Jan 27, 2017

CVE-2016-9584
37Monitor
libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
CriticalCVSS 9.1No exploitEPSS 2%
- Pre-auth
- Memory safety
libical project · libicalJan 18, 2017
CVE-2016-5826
31Monitor
The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by
HighCVSS 7.5No exploitEPSS 3%
libical project · libicalJan 27, 2017
CVE-2016-5827
31Monitor
The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via
HighCVSS 7.5No exploitEPSS 3%
libical project · libicalJan 27, 2017
CVE-2016-5824
23Monitor
libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
MediumCVSS 5.5No exploitEPSS 2%
- Memory safety
- Denial of service
libical project · libicalJan 27, 2017
CVE-2016-5825
22Monitor
The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read)
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
libical project · libicalJan 27, 2017
CVE-2016-5823
22Monitor
The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a craf
MediumCVSS 5.5No exploitEPSS 1%
- Memory safety
- Denial of service
libical project · libicalJan 27, 2017