libical (SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 package libical, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2016-9584 — CVSS 9.1 (critical): libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
• CVE-2016-5827 — CVSS 7.5 (high): The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read)…
• CVE-2016-5824 — CVSS 5.5 (medium): libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.