CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63387 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2

CVE-2026-63387 affecting package mysql for versions less than 8.0.46-2. A patched version of the package is available...

ROOT-OS-DEBIAN-12-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:11. Multiple fixed versions available...

BELL-CVE-2026-63387

Bulletin has no description...

UBUNTU-CVE-2026-63387

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdnsserverrequestformatresponse. The final-label check...