CVE-2016-5824

MEDIUM

libical 1.0 - Use After Free

Title source: llm

Description

libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.

References (12)

Scores

CVSS v3 5.5
EPSS 0.0044
EPSS Percentile 63.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Classification

CWE
CWE-416
Status published

Affected Products (15)

libical_project/libical
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
redhat/enterprise_linux_desktop
redhat/enterprise_linux_desktop
redhat/enterprise_linux_server
redhat/enterprise_linux_server
redhat/enterprise_linux_server_aus
redhat/enterprise_linux_server_eus
redhat/enterprise_linux_server_tus
redhat/enterprise_linux_workstation
redhat/enterprise_linux_workstation
n/a/n/a

Timeline

Published Jan 27, 2017
Tracked Since Feb 18, 2026