libical (SUSE:Linux Enterprise Software Development Kit 11 SP4) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Software Development Kit 11 SP4 package libical, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2016-9584 — CVSS 9.1 (critical): libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.
• CVE-2016-5826 — CVSS 7.5 (high): The parser_get_next_char function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read) by…
• CVE-2016-5827 — CVSS 7.5 (high): The icaltime_from_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read)…
• CVE-2016-5823 — CVSS 5.5 (medium): The icalproperty_new_clone function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (use-after-free) via a…
• CVE-2016-5824 — CVSS 5.5 (medium): libical 1.0 allows remote attackers to cause a denial of service (use-after-free) via a crafted ics file.
• CVE-2016-5825 — CVSS 5.5 (medium): The icalparser_parse_string function in libical 0.47 and 1.0 allows remote attackers to cause a denial of service (out-of-bounds heap read)…