33 matches found
ROS-20261023-73-0011
The vulnerability of the evtagunmarshalheader function in the Libevent asynchronous event notification library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CLSA-2026-1792536927 libevent: Fix of 5 CVEs
CVE-2026-63383: fix out-of-bounds read in decodetaginternal - CVE-2026-63384: reject payload lengths above INTMAX in evtagunmarshalheader - CVE-2026-63387: fix off-by-one stack buffer overflow in dnsnametolabels - CVE-2026-63385: reject HTTP header values containing CR or LF - CVE-2026-63382:...
CLSA-2026-1792537208 libevent: Fix of 5 CVEs
CVE-2026-63383: fix out-of-bounds read in decodetaginternal - CVE-2026-63384: reject payload lengths above INTMAX in evtagunmarshalheader - CVE-2026-63387: fix off-by-one stack buffer overflow in dnsnametolabels - CVE-2026-63385: reject HTTP header values containing CR or LF - CVE-2026-63382:...
CLSA-2026-1792536579 libevent: Fix of 5 CVEs
CVE-2026-63383: fix out-of-bounds read in decodetaginternal - CVE-2026-63384: reject payload lengths above INTMAX in evtagunmarshalheader - CVE-2026-63387: fix off-by-one stack buffer overflow in dnsnametolabels - CVE-2026-63385: reject HTTP header values containing CR or LF - CVE-2026-63382:...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: libevent (UTSA-2026-124532)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-124532 advisory. Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader...
libevent security update
An update is available for libevent. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libevent packages provide an abstract asynchronous event notification...
libevent security update
An update is available for libevent. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libevent packages provide an abstract asynchronous event notification...
RLSA-2026:67910 Important: libevent security update
The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...
RockyLinux 8 : libevent (RLSA-2026:67908)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67908 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...
AlmaLinux 8 : libevent (ALSA-2026:67908)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:67908 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...
RockyLinux 10 : libevent (RLSA-2026:67909)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67909 advisory. libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of...
libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...
libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...
Important: Red Hat Security Advisory: libevent security update
An update for libevent is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...
ALSA-2026:67908 Important: libevent security update
The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...
ALSA-2026:67910 Important: libevent security update
The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...
Important: libevent security update
The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...
Important: libevent security update
The libevent packages provide an abstract asynchronous event notification library. Security Fixes: libevent: Libevent: Denial of Service via malformed RPC data CVE-2026-63383 libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption CVE-2026-63387...
libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`
A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...