ROOT-OS-DEBIAN-12-CVE-2026-63384 CVE-2026-63384 in libevent - Patched by Root

Root has patched CVE-2026-63384 in the libevent package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root

Root has patched CVE-2026-63385 in the libevent package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63382 CVE-2026-63382 in libevent - Patched by Root

Root has patched CVE-2026-63382 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63384 CVE-2026-63384 in libevent - Patched by Root

Root has patched CVE-2026-63384 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63385 CVE-2026-63385 in libevent - Patched by Root

Root has patched CVE-2026-63385 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63387 CVE-2026-63387 in libevent - Patched by Root

Root has patched CVE-2026-63387 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63383 CVE-2026-63383 in libevent - Patched by Root

Root has patched CVE-2026-63383 in the libevent package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-63388 CVE-2026-63388 in libevent - Patched by Root

Root has patched CVE-2026-63388 in the libevent package for Root:Debian:13. Multiple fixed versions available...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: libevent: libevent-2.1.12-19.1.hum1 aarch64, x8664 libevent-devel-2.1.12-19.1.hum1 aarch64, x8664 libevent-doc-2.1.12-19.1.hum1 noarch libevent-2.1.12-19.1.hum1.src src Security Fixes: libevent:...

libevent: Libevent: Denial of Service via malformed RPC data

A flaw was found in Libevent, an event notification library. A remote attacker could exploit an out-of-bounds read vulnerability in the decodetaginternal function by sending specially crafted, attacker-controlled tagged RPC Remote Procedure Call data. This could lead to a denial of service, causi...

libevent: Libevent: Denial of Service via integer conversion error in `evtag_unmarshal_header`

A flaw was found in Libevent. An incorrect integer conversion in the evtagunmarshalheader function allows a remote attacker to provide a specially crafted payload length. This can lead to a wrapped large allocation request, resulting in a denial of service DoS for the affected system...

libevent: Libevent: HTTP header smuggling allows authorization bypass or cache poisoning

A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP Hypertext Transfer Protocol trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers,...

libevent: Libevent: Memory corruption due to use-after-free

A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the evbufferaddbufferreference function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or...

libevent: Libevent: Arbitrary code execution via heap out-of-bounds write in AF_UNIX handling

A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the buffereventsocketsetconnaddress function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AFUNIX listener, an attacker can overwrite critical heap data, leading to memory...

CVE-2026-63381

A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the evbufferaddbufferreference function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or...

CVE-2026-63379

A flaw was found in Libevent, an event notification library. An unauthenticated remote attacker can exploit a vulnerability where chunked HTTP Hypertext Transfer Protocol trailers are incorrectly merged into request headers. This allows the attacker to place security-sensitive fields in trailers,...

CVE-2026-63388

A flaw was found in Libevent. A heap out-of-bounds write vulnerability in the buffereventsocketsetconnaddress function allows an unauthenticated local peer to achieve arbitrary code execution. By connecting to an AFUNIX listener, an attacker can overwrite critical heap data, leading to memory...

CVE-2026-63380

A flaw was found in Libevent, an event notification library. This vulnerability allows a local attacker to trigger a null pointer dereference during specific error handling within the evwsnewsession function. By inducing an allocation or locking failure, an attacker can cause the application to...