CVE-2016-5421: Canonical Ubuntu Linux

High severity, CVSS 8.1. EPSS: 8% chance of exploitation in the next 30 days.

Use-after-free vulnerability in libcurl before 7.50.1 allows attackers to control which connection is used or possibly have unspecified other impact via unknown vectors.

Affected products

• Canonical Ubuntu Linux: version 12.04 only; version 14.04 only; version 16.04 only
• Debian Debian Linux: version 8.0 only
• Fedoraproject Fedora: version 23 only; version 24 only
• Haxx Libcurl: up to and including 7.50.0
• Opensuse Leap: version 42.1 only
• Opensuse Opensuse: version 13.2 only

Published 2016-08-10. Last modified 2026-06-17.