The searchmakenew function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.
"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2016-10197.json"