CVE-2014-6272

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...

CVE-2014-6272

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...

CVE-2014-6272

Libevent’s evbuffer API contains multiple integer overflows in affected versions: 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta. An attacker providing insanely large inputs to evbuffer_add, evbuffer_expand, or bufferevent_write can trigger a heap-based buffer overflow or a...

Debian DLA-137-1 : libevent security update

The libevent library was vulnerable to a potential heap overflow in the buffer/bufferevent APIs. This update was prepared by Nguyen Cong who used the upstream-provided patch. Thanks to them! NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA securit...

GLSA-201502-07 : libevent: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201502-07 libevent: User-assisted execution of arbitrary code Multiple integer overflow errors in libevent could cause a heap-based buffer overflow. Impact : A context-dependent attacker could cause an application linked against...

libevent: User-assisted execution of arbitrary code

Background libevent is a library to execute a function when a specific event occurs on a file descriptor. Description Multiple integer overflow errors in libevent could cause a heap-based buffer overflow. Impact A context-dependent attacker could cause an application linked against libevent to pa...

[SECURITY] [DLA 137-1] libevent security update

Package : libevent Version : 1.4.13-stable-1+deb6u1 CVE ID : CVE-2014-6272 Debian Bug : 774645 The libevent library was vulnerable to a potential heap overflow in the buffer/bufferevent APIs. This update was prepared by Nguyen Cong who used the upstream-provided patch. Thanks to them! Raphaël...

DLA-137-1 libevent - security update

Bulletin has no description...

openSUSE Security Update : libevent (openSUSE-SU-2015:0132-1)

libevent was updated to fixed heap overflows in buffer API bsc897243 CVE-2014-6272 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2015-68. The text description of this plugin is C SU...

Ubuntu: Security Advisory (USN-2477-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Multiple Heap Buffer Overflow Vulnerabilities in Libevent

libevent is an event-triggered network library for windows, linux, bsd and other platforms, the internal use of select, epoll, kqueue and other system calls to manage the event mechanism. Libevent has multiple heap buffer overflow vulnerabilities that could allow an attacker to execute arbitrary...

Ubuntu Patches Several Security Flaws

Ubuntu has released a number of patches for security vulnerabilities in several versions of the OS, including some remote code execution flaws in Thunderbird, which is included with Ubuntu. Thunderbird is Mozilla’s email client, and the company recently fixed several memory corruption...

Ubuntu 14.04 LTS : libevent vulnerability (USN-2477-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-2477-1 advisory. Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application...

USN-2477-1: libevent vulnerability

Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...

USN-2477-1 libevent vulnerability

Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...

libevent: heap overflow

A defect in the libevent evbuffer API could possibly leave some programs that use the evbuffer API open to potential heap overflows. A program using the evbufferadd, evbufferprepend, evbufferexpand, exbufferreservespace, or evbufferread functions may be vulnerable if an attacker is able to coax t...

libevent integer overflow

evbuffers integer overflow...

[ MDVSA-2015:017 ] libevent

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2015:017 http://www.mandriva.com/en/support/security/ Package : libevent Date : January 8, 2015 Affected: Business Server 1.0 Problem Description: Updated libevent packages fix security vulnerability: Andrew...

FreeBSD : libevent -- integer overflow in evbuffers (daa8a49b-99b9-11e4-8f66-3085a9a4510d)

Debian Security Team reports : Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In order to exploit this...

Mandriva Linux Security Advisory : libevent (MDVSA-2015:017-1)

Updated libevent packages fix security vulnerability : Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In...