Candidate: CVE-2016-9584 PublicDate: 2017-01-18 17:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9584 http://www.openwall.com/lists/oss-security/2016/12/15/5 Description: libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file. Ubuntu-Description: Notes: Bugs: Priority: low Discovered-by: Agustin Mista Assigned-to: CVSS: nvd: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H [9.1 CRITICAL] Patches_libical: upstream_libical: released (0.48-2+deb7u1) precise_libical: ignored (reached end-of-life) precise/esm_libical: DNE (precise was needed) trusty_libical: ignored (reached end-of-life) trusty/esm_libical: DNE (trusty was needed) vivid/stable-phone-overlay_libical: ignored (reached end-of-life) vivid/ubuntu-core_libical: DNE wily_libical: ignored (reached end-of-life) xenial_libical: ignored (end of standard support, was needed) esm-infra/xenial_libical: needed yakkety_libical: ignored (reached end-of-life) zesty_libical: ignored (reached end-of-life) artful_libical: ignored (reached end-of-life) bionic_libical: needed cosmic_libical: ignored (reached end-of-life) disco_libical: ignored (reached end-of-life) eoan_libical: DNE focal_libical: DNE groovy_libical: DNE hirsute_libical: DNE impish_libical: DNE jammy_libical: DNE devel_libical: DNE Patches_libical3: upstream_libical3: released (3.0.1-1) precise_libical3: DNE precise/esm_libical3: DNE trusty_libical3: DNE trusty/esm_libical3: DNE vivid/ubuntu-core_libical3: DNE xenial_libical3: DNE bionic_libical3: not-affected (3.0.1-5) cosmic_libical3: not-affected (3.0.1-5) disco_libical3: not-affected (3.0.1-5) eoan_libical3: not-affected (3.0.1-5) focal_libical3: not-affected (3.0.1-5) groovy_libical3: not-affected (3.0.1-5) hirsute_libical3: not-affected (3.0.1-5) impish_libical3: not-affected (3.0.1-5) jammy_libical3: not-affected (3.0.1-5) devel_libical3: not-affected (3.0.1-5)