Red Hat Bugzilla – Bug 1443326
REJECTED CVE-2017-5437 Mozilla: Vulnerabilities in libevent library (MFSA 2017-11, MFSA 2017-12)
Last modified: 2017-08-17 01:41:12 EDT
Three vulnerabilities in the <code>libevent</code> library allowing for out-of-bounds reads and denial of service (DoS) attacks.
This issue has been addressed in the following products: Red Hat Enterprise Linux 6 Via RHSA-2017:1104 https://access.redhat.com/errata/RHSA-2017:1104
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2017:1106 https://access.redhat.com/errata/RHSA-2017:1106
This CVE was rejected by Mitre. Name: CVE-2017-5437 URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5437 Assigned: 20170113 ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-10195, CVE-2016-10196, CVE-2016-10197. Reason: This candidate is a duplicate of CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. Notes: All CVE users should reference CVE-2016-10195, CVE-2016-10196, and/or CVE-2016-10197 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Mozilla replaced this CVE with the following: Three vulnerabilities were reported in the Libevent library that allow for out-of-bounds reads and denial of service (DoS) attacks. These were fixed in the Libevent library and these changes were ported to Mozilla code. These issues use CVE ids: CVE-2016-10195, CVE-2016-10196 and CVE-2016-10197 Acknowledgements: Name: the Mozilla project Upstream: Huzaifa Sidhpurwala External Reference: https://www.mozilla.org/en-US/security/advisories/mfsa2017-12/#CVE-2016-10196