The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-10195