Advisories · Technology
libevent.
Every CVE that names libevent among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
Libevent: HTTP header handling bugs create risk of access control bypass.
- libevent
- HTTP request smuggling
- CVSS 6.3 Medium
Libevent: HTTP Header smuggling
- libevent
- HTTP request smuggling
- CVSS 7.0 High
Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response
- libevent
- Memory corruption
- CWE-193
- CVSS 8.7 High
Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.
- libevent
- Memory corruption
- CVSS 5.7 Medium
Libevent: Null Pointer Dereference in `evws_new_session`
- libevent
- Memory corruption
- CVSS 9.2 CriticalCritical · CVSS 9+
libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling
- libevent
- HTTP request smuggling
- CVSS 5.8 Medium
Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`
- libevent
- Memory corruption
- CVSS 7.5 High
Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames
- libevent
- Denial of service
- CVSS 8.7 High
Libevent: decode_tag_internal() can lead to out-of-bounds read
- libevent
- Memory corruption
- CVSS 8.4 High
Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept
- libevent
- Denial of service
- Memory corruption