ROOT-OS-DEBIAN-11-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-63388 affecting package ntp for versions less than 4.2.8p17-3

CVE-2026-63388 affecting package ntp for versions less than 4.2.8p17-3. A patched version of the package is available...

CVE-2026-63388 affecting package libevent for versions less than 2.1.13-1

CVE-2026-63388 affecting package libevent for versions less than 2.1.13-1. An upgraded version of the package is available that resolves this issue...

ROOT-OS-DEBIAN-12-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:13. Multiple fixed versions available...

UBUNTU-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

CVE-2026-63388

CVE-2026-63388 is a heap out-of-bounds write in libevent (an event notification library) affecting versions prior to 2.1.13 and 2.2.2-alpha . The flaw is in bufferevent_sock.c, where bufferevent_socket_set_conn_address_ copies a kernel-supplied AF_UNIX peer address into a 28-byte conn_address fie...