EUVD-2007-1027

Malware in sbrugna...

EUVD-2016-1380

Malware in sbrugna...

Out-of-bounds Read

libevent is vulnerable to out-of-bounds reads. A remote attacker could cause denial of service via an out-of-bounds read by forcing the application to resolve an empty hostname. Affected is the function searchmakenew of the file evdns.c...

Remote Code Execution (RCE)

libevent.so is vulnerable to remote code execution RCE. The application contains multiple integer overflows in the evbufferadd, evbufferexpand and buffereventwrite functions in buffer.c that can lead to the application crashing or arbitrary code being executed...

libevent: Stack-buffer overflow in the name_parse() function

A vulnerability was found in libevent with the parsing of DNS requests and replies. An attacker could send a forged DNS response to an application using libevent which could lead to reading data out of bounds on the heap, potentially disclosing a small amount of application memory...

USN-3228-1 libevent vulnerabilities

Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...