Linux Distros Unpatched Vulnerability : CVE-2026-63379

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttpreadtrailer and...

UBUNTU-CVE-2026-63387

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63381

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63383

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63379

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until...

UBUNTU-CVE-2026-63384

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

Linux Distros Unpatched Vulnerability : CVE-2026-63382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate...

Linux Distros Unpatched Vulnerability : CVE-2026-63381

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbufferaddbufferreference processes ...

UBUNTU-CVE-2026-63382

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-a...

UBUNTU-CVE-2026-63380

Libevent is an event notification library. Prior to 2.2.2-alpha, libev...

Linux Distros Unpatched Vulnerability : CVE-2026-63383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in eventtagging.c when...

CVE-2026-63495

Libevent is an event notification library. From 2.2.0-alpha-dev until 2.2.2-alpha, the libevent WebSocket server in ws.c accumulates fragmented frames in evws-incompleteframes without enforcing a total message-size limit. An unauthenticated remote client can repeatedly send fragmented WebSocket...

DEBIAN-CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...

CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

CVE-2026-63384

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in eventtagging.c when evtagunmarshalheader uses evtagdecodeint to decode an attacker-controlled uint32 payload length and returns it as a signed int. Values above INTMAX becom...

DEBIAN-CVE-2026-63385

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttpdecodeuriinternal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a path and bypass...

CVE-2026-63388

Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in buffereventsock.c when buffereventsocketsetconnaddress copies a kernel-supplied AFUNIX peer address into buffereventprivate.connaddress. Release builds compiled with NDEBUG disab...