Ubuntu 14.04 LTS / 16.04 LTS : libevent vulnerabilities (USN-3228-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3228-1 advisory. Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this iss...

USN-3228-1: libevent vulnerabilities

Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...

USN-3228-1 libevent vulnerabilities

Guido Vranken discovered that libevent incorrectly handled memory when processing certain data. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code...

Updated libevent packages fix security vulnerability

The DNS code of Libevent contains an OOB read which can trigger a crash CVE-2016-10197 The libevent evutilparsesockaddrport contains a buffer overflow which can cause a segmentation fault CVE-2016-10196 The nameparse function in libevent's DNS code is vulnerable to a buffer overread CVE-2016-1019...

MGASA-2017-0066 Updated libevent packages fix security vulnerability

The DNS code of Libevent contains an OOB read which can trigger a crash CVE-2016-10197 The libevent evutilparsesockaddrport contains a buffer overflow which can cause a segmentation fault CVE-2016-10196 The nameparse function in libevent's DNS code is vulnerable to a buffer overread CVE-2016-1019...

Debian DSA-3789-1 : libevent - security update

Several vulnerabilities were discovered in libevent, an asynchronous event notification library. They would lead to Denial Of Service via application crash, or remote code execution. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Debian DLA-824-1 : libevent security update

Several vulnerabilities were discovered in libevent, an asynchronous event notification library. They would lead to Denial Of Service via application crash, or remote code execution. For Debian 7 'Wheezy', these problems have been fixed in version 2.0.19-stable-3+deb7u2. We recommend that you...

[SECURITY] [DLA 824-1] libevent security update

Package : libevent Version : 2.0.19-stable-3+deb7u2 CVE ID : CVE-2016-10195 CVE-2016-10196 CVE-2016-10197 Debian Bug : 854092 Several vulnerabilities were discovered in libevent, an asynchronous event notification library. They would lead to Denial Of Service via application crash, or remote code...

[SECURITY] [DSA 3789-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3789-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2017 https://www.debian.org/security/faq -...

[SECURITY] [DSA 3789-1] libevent security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3789-1 [email protected] https://www.debian.org/security/ Sebastien Delafond February 15, 2017 https://www.debian.org/security/faq -...

DLA-824-1 libevent - security update

Bulletin has no description...

DSA-3789-1 libevent - security update

Bulletin has no description...

Debian Security Advisory DSA 3789-1 (libevent - security update)

Several vulnerabilities were discovered in libevent, an asynchronous event notification library. They would lead to Denial Of Service via application crash, or remote code execution. OpenVAS Vulnerability Test $Id: deb3789.nasl 6607 2017-07-07 12:04:25Z cfischer $ Auto-generated from advisory DSA...

Debian: Security Advisory (DSA-3789-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

libevent Denial of Service Vulnerability (CNVD-2017-01525)

libevent is an event-triggered network library for windows, linux, bsd and other platforms, the internal use of select, epoll, kqueue and other system calls to manage the event mechanism. A denial of service vulnerability exists in libevent. An attacker can exploit this vulnerability to crash an...

libevent Denial of Service Vulnerability (CNVD-2017-01524)

libevent is an event-triggered network library for windows, linux, bsd and other platforms, the internal use of select, epoll, kqueue and other system calls to manage the event mechanism. A denial of service vulnerability exists in libevent. An attacker can exploit this vulnerability to crash an...

libevent Denial of Service Vulnerability

libevent is an event-triggered network library for windows, linux, bsd and other platforms, the internal use of select, epoll, kqueue and other system calls to manage the event mechanism. A denial of service vulnerability exists in libevent. An attacker can exploit this vulnerability to crash an...

libevent -- multiple vulnerabilities

Debian Security reports: CVE-2016-10195: The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read. CVE-2016-10196: Stack-based buffer overflow in the...

PT-2016-3318 · Libevent +5 · Libevent +5

Name of the Vulnerable Software and Affected Versions: libevent versions prior to 2.1.6-beta Description: The issue is related to a stack-based buffer overflow in the evutil parse sockaddr port function, which can be exploited by attackers to cause a denial of service, resulting in a segmentation...

CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...