CVE-2017-5437 - log back

CVE-2017-5437 created at 25 Sep 2019 19:31:40
Severity
+ High
Remote
+ Remote
Type
+ Denial of service
Description
+ Three vulnerabilities were reported in the Libevent library that allow for out-of-bounds reads and denial of service (DoS) attacks: CVE-2016-10195, CVE-2016-10196, and CVE-2016-10197. These were fixed in the Libevent library and these changes were ported to Mozilla code in Firefox 53.
References
+ https://www.mozilla.org/en-US/security/advisories/mfsa2017-10/#CVE-2017-5437
+ https://bugzilla.mozilla.org/show_bug.cgi?id=1343453
Notes