CVE-2016-9584
Fixed in a distro release EPSS 2%
libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
Products: libical_project libical
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libical3 | 3.0.1-1 |
| Debian 13 | libical3 | 3.0.1-1 |
| Debian 14 | libical3 | 3.0.1-1 |
| Debian 7 | libical | 0.48-2+deb7u1 |
| SUSE Linux Enterprise Desktop 12 SP2 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Desktop 12 SP3 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Server 11 SP4 | libical | 0.43-1.10.6.1 |
| SUSE Linux Enterprise Server 12 SP2 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Server 12 SP3 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 11 SP4 | libical | 0.43-1.10.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP2 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP3 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Software Development Kit 11 SP4 | libical | 0.43-1.10.6.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP2 | libical | 1.0.1-16.3.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP3 | libical | 1.0.1-16.3.1 |
| Ubuntu 16.04 LTS | libical | no fix |
| Ubuntu 18.04 LTS | libical | no fix |