ubuntu · CVE-2016-2090

Quick triage

Priority: low Published: 2017-01-13 16:59:00 UTC Updated: 2025-08-25 21:56:26 UTC

View at Official ubuntu advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2016-2090 low priority: Ubuntu including 1 source packages (libbsd), 13 status rows across 13 suites (artful, bionic, cosmic, disco, eoan, precise, trusty, upstream, vivid, wily, xenial, yakkety, zesty): not-affected 9, ignored 2, released 2.

Description:

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

cvelogic Threat Intelligence