CVE-2016-10195: Debian Linux

Critical severity, CVSS 9.8. EPSS: 6.7% chance of exploitation in the next 30 days.

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.

Affected products

• Debian Debian Linux: version 8.0 only
• Libevent Project Libevent: up to and including 2.1.5

Published 2017-03-15. Last modified 2026-06-17.