CVE-2016-10195 on Ubuntu 14.04 LTS (trusty) - medium.
Description:
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.