USN-2477-1 libevent vulnerability

Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...

libevent: heap overflow

A defect in the libevent evbuffer API could possibly leave some programs that use the evbuffer API open to potential heap overflows. A program using the evbufferadd, evbufferprepend, evbufferexpand, exbufferreservespace, or evbufferread functions may be vulnerable if an attacker is able to coax t...

FreeBSD : libevent -- integer overflow in evbuffers (daa8a49b-99b9-11e4-8f66-3085a9a4510d)

Debian Security Team reports : Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In order to exploit this...

DSA-3119-1 libevent - security update

Bulletin has no description...

UBUNTU-CVE-2014-6272

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...

PT-2015-1927

Name of the Vulnerable Software and Affected Versions Libevent versions 2.0.x through 2.0.21 Libevent versions 2.1.x through 2.1.4-beta Description The issue is caused by multiple integer overflows in the evbuffer API, which can lead to a heap-based buffer overflow or an infinite loop when...

PT-2015-3093

Name of the Vulnerable Software and Affected Versions Libevent versions 1.4.x through 1.4.14 Libevent versions 2.0.x through 2.0.21 Libevent versions 2.1.x through 2.1.4-beta Description The issue is caused by multiple integer overflows in the evbuffer API, allowing context-dependent attackers to...