CVE-2016-2090: Buffer Overflow
Last updated 25 August 2025
Other sources
Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libbsdto a version that resolves this vulnerability.Fixed in 0.11.7-2Fixed in 0.12.2-2Fixed in 0.12.2-3 - Upgrade
Upgrade
libbsdto a version that resolves this vulnerability.Fixed in 0.8.2
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID is CVE-2016-2090.
What is the severity of CVE-2016-2090?
The severity of CVE-2016-2090 is critical with a CVSS score of 9.8.
What is the affected software for CVE-2016-2090?
The affected software for CVE-2016-2090 includes versions of libbsd before 0.8.2.
How does CVE-2016-2090 affect the software?
CVE-2016-2090 allows attackers to trigger a heap-based buffer overflow via unknown vectors, resulting in unspecified impact.
How can I fix CVE-2016-2090?
To fix CVE-2016-2090, update your software to version 0.8.2 or later of libbsd.