libical project libical vulnerabilities

Latest libical project libical CVEs

Newest publication first

1. CVE-2016-5827 The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.

   Published 2017-01-27

   High·CVSS 7.5 EPSS 3.1%

   The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted string to the icalparser_parse_string function.

2. CVE-2016-5826 The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.

   Published 2017-01-27

   High·CVSS 7.5 EPSS 3.2%

   The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by crafting a string to the icalparser_parse_string function.

3. CVE-2016-5825 The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file.

   Published 2017-01-27

   Medium·CVSS 5.5 EPSS 1.6%

   The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) via a crafted ics file.

4. CVE-2016-5823 The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

   Published 2017-01-27

   Medium·CVSS 5.5 EPSS 1.0%

   The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

5. CVE-2016-5824 libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

   Published 2017-01-27

   Medium·CVSS 5.5 EPSS 2.2%

   libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

6. CVE-2016-9584 libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

   Published 2017-01-18

   Critical·CVSS 9.1 EPSS 2.3%

   libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.