CVE-2016-2090

Description

Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

Overview

State

—

Assigner (CNA)

—

CVSS severity

MEDIUM

CVSS score

5.0 / 10

CVSS vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Effective score

5.0 / 10 MEDIUM source: CNA overview

CWE(s)

—

Reserved

—

Published

2017-01-13 00:00 UTC

Last updated

—

Source

https://www.rapid7.com/db/vulnerabilities/debian-cve-2016-2090/

NVD triage scoring NVD CVE 2.0

Layer NVD adds on top of the CNA's CVE record — published / last-modified timestamps, exploitability / impact subscores, and the FIRST.org EPSS probability that this CVE will be exploited in the wild in the next 30 days.

NVD published

2017-01-13 16:59:00 UTC

NVD last modified

2026-06-17 00:43:25 UTC

NVD CVSS v3.1

9.8 / 10 CRITICAL source: nvd@nist.gov

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability subscore

3.9 / 10

Impact subscore

5.9 / 10

EPSS score

0.0318 (probability of exploitation in next 30 days)

EPSS percentile

86.73% vs all CVEs — higher = more likely to be exploited, as of 2026-07-27

NVD-assigned CWE(s): CWE-119 (differs from the CNA list above)

European Union Vulnerability Database ENISA EUVD

ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.

EUVD ID

EUVD-2016-3195

Assigner

mitre

Published

Jan 13, 2017, 4:00:00 PM

Updated

Aug 5, 2024, 11:17:50 PM

EUVD-reported EPSS

3.1800

Vendors

n/a

Products

n/a (n/a)

Aliases

GHSA-q44v-89pv-h73p

ENISA description: Off-by-one vulnerability in the fgetwln function in libbsd before 0.8.2 allows attackers to have unspecified impact via unknown vectors, which trigger a heap-based buffer overflow.

Vendor references (0)

References embedded in the original CVE record by the assigning CNA.

None in the CVE record.

MITRE references (9) cveawg.mitre.org

Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.

• [oss-security] 20160128 Re: Heap buffer overflow in fgetwln function of libbsd mailing-list, x_refsource_MLIST
• [debian-lts-announce] 20191230 [SECURITY] [DLA 2052-1] libbsd security update mailing-list, x_refsource_MLIST
• FEDORA-2016-d3e562bb52 vendor-advisory, x_refsource_FEDORA
• FEDORA-2016-5c3d057783 vendor-advisory, x_refsource_FEDORA
• GLSA-201607-13 vendor-advisory, x_refsource_GENTOO
• USN-4243-1 vendor-advisory, x_refsource_UBUNTU
• https://blog.fuzzing-project.org/36-Heap-buffer-overflow-in-fgetwln-function-of-libbsd.html x_refsource_MISC
• https://bugs.freedesktop.org/show_bug.cgi?id=93881 x_refsource_CONFIRM
• https://cgit.freedesktop.org/libbsd/commit/?id=c8f0723d2b4520bdd6b9eb7c3e7976de726d7ff7 x_refsource_CONFIRM

Web references (5)

DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.

• https://security.alpinelinux.org/vuln/CVE-2016-2090 rapid7:security.alpinelinux.org
• https://attackerkb.com/topics/CVE-2016-2090 rapid7:attackerkb.com
• https://www.cve.org/CVERecord?id=CVE-2016-2090 rapid7:www.cve.org
• http://cwe.mitre.org/data/definitions/119.html rapid7:cwe.mitre.org
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-3195 rapid7:euvd.enisa.europa.eu

• Rapid7 — Solution
  rapid7

  alpine-linux-upgrade-libbsd

  2026-05-30 00:06 UTC
• Rapid7 — Solution
  rapid7

  debian-upgrade-libbsd

  2026-05-29 09:21 UTC

Only Available for Registered Users. Sign in to view.