6 matches found
libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning
A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP Hypertext Transfer Protocol trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers,...
CVE-2026-63384
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
UBUNTU-CVE-2026-63384
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
CVE-2026-63383
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...
AZL-96953 CVE-2026-63381 affecting package libevent 2.1.12-1
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbufferaddbufferreference processes an output buffer whose outtotallen is zero. evbufferfreeallchains frees the initial empty chain without resetting outbuf-first,...