CVE-2016-2090

critical

Published 2017-01-13 · Modified 2026-05-13

💬 Discuss on Community ✚ Propose mitigation

CVSS v3

9.8

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v4 NEW

—

not yet in upstream

VIR risk

9.8

Description

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

Predictions

Exploit likelihood

97%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2016-2090 NameCVE-2016-2090 DescriptionOff-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow. SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)…

CVE-2016-2090

Name	CVE-2016-2090
Description	Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-2052-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libbsd (PTS)	bullseye	0.11.3-1+deb11u1	fixed
	bookworm	0.11.7-2	fixed
	forky, trixie	0.12.2-2	fixed
	sid	0.12.2-3	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin
libbsd	source	squeeze	(not affected)
libbsd	source	wheezy	(not affected)
libbsd	source	jessie	0.7.0-2+deb8u1	DLA-2052-1
libbsd	source	(unstable)	0.8.2-1

Notes

[wheezy] - libbsd <not-affected> (Vulnerable code not present)
[squeeze] - libbsd <not-affected> (Vulnerable code not present)
Not used anywhere in Debian according to codesearch.debian.net
https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html
https://bugs.freedesktop.org/show_bug.cgi?id=93881
Fixed by: http://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7 (0.8.2)
Introduced by: http://cgit.freedesktop.org/libbsd/commit/?id=a97ce513e031b29a47965b740be14fb9a84277fc (0.5.0)

Home - Debian Security - Source (Git)

Apply commands

text fix

Notes

[wheezy] - libbsd <not-affected> (Vulnerable code not present)[squeeze] - libbsd <not-affected> (Vulnerable code not present)Not used anywhere in Debian according to codesearch.debian.nethttps://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.htmlhttps://bugs.freedesktop.org/show_bug.cgi?id=93881Fixed by: http://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7 (0.8.2)Introduced by: http://cgit.freedesktop.org/libbsd/commit/?id=a97ce513e031b29a47965b740be14fb9a84277fc (0.5.0)

OS impact

Fedora Affected 2 releases

Version	Status	Fixed in
25	Affected	—
24	Affected	—

Ubuntu Affected 5 releases

Version	Status	Fixed in
19.04	Affected	—
18.04	Affected	—
16.04	Affected	—
14.04	Affected	—
12.04	Affected	—

Debian Mixed 6 releases

Version	Status	Fixed in
trixie	Fixed	`0.8.2-1`
sid	Fixed	`0.8.2-1`
forky	Fixed	`0.8.2-1`
bullseye	Fixed	`0.8.2-1`
bookworm	Fixed	`0.8.2-1`
8.0	Affected	—

Application impact

Vendor	Product	Versions	Fixed
freedesktop	libbsd	`{"endExcluding":"0.8.2"}`	`0.8.2`

References

CWEs

CWE-119

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.