CVE-2016-9584

libical allows remote attackers to cause a denial of service (use-after-free) and possibly read heap memory via a crafted ics file.

• CWE-416

• http://www.openwall.com/lists/oss-security/2016/12/15/5Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94948Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2016/12/15/5Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/94948Third Party Advisory, VDB Entry

Published

Jan 18, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9578A vulnerability was discovered in SPICE before 0.13.90 in th…7.5
• CVE-2016-9579A flaw was found in the way Ceph Object Gateway would proces…6.5
• CVE-2016-9580An integer overflow vulnerability was found in tiftoimage fu…3.3
• CVE-2016-9581An infinite loop vulnerability in tiftoimage that results in…3.3
• CVE-2016-9582Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9583An out-of-bounds heap read vulnerability was found in the jp…5.5
• CVE-2016-9585Red Hat JBoss EAP version 5 is vulnerable to a deserializati…
• CVE-2016-9586curl before version 7.52.0 is vulnerable to a buffer overflo…5.9
• CVE-2016-9587Ansible before versions 2.1.4, 2.2.1 is vulnerable to an imp…8.1
• CVE-2016-9588arch/x86/kvm/vmx.c in the Linux kernel through 4.9 mismanage…
• CVE-2016-9589Undertow in Red Hat wildfly before version 11.0.0.Beta1 is v…
• CVE-2016-9590puppet-swift before versions 8.2.1, 9.4.4 is vulnerable to a…6.5