CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

CVE-2016-10196

Stack-based buffer overflow in the evutilparsesockaddrport function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service segmentation fault via vectors involving a long string in brackets in the ipasstring argument...

UBUNTU-CVE-2016-10195

The nameparse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the labellen variable, which triggers an out-of-bounds stack read...

UBUNTU-CVE-2016-10197

The searchmakenew function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service out-of-bounds read via an empty hostname...

CVE-2016-10197

The searchmakenew function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service out-of-bounds read via an empty hostname...

Slackware 14.1 / current : libevent (SSA:2016-085-01)

New libevent packages are available for Slackware 14.1 and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2016-085-01. The text itself is copyright C...

[slackware-security] libevent

New libevent packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/libevent-2.0.22-i486-1slack14.1.txz: Upgraded. Multiple integer overflows in the evbuffer API allow context-dependent attackers to...

Vulnerabilities in the Libevent library, which allow a hacker to cause a service failure

The multiple vulnerabilities in the evbuffer programming interface of the Libevent library are caused by integer overflows. Exploiting these vulnerabilities allows an attacker to cause a service failure by using large input data in functions such as evbufferadd, evbufferexpand, and buffereventwri...

Tor: [tor] libevent dns OOB read

The DNS code of Libevent contains this rather obvious OOB read: c 3122 static char 3123 searchmakenewconst struct searchstate const state, int n, const char const basename 3124 const sizet baselen = strlenbasename; 3125 const char needtoappenddot = basenamebaselen - 1 == '.' ? 0 : 1; If the lengt...

Tor: [tor] control connection pre-auth DoS (infinite loop) with --enable-bufferevents

In control.c, this is the loop that retrieves data from the input buffer of the connection, or returns if no complete linefreed-terminated line is available connectionfetchfrombufline returns 0. c 4225 while 1 4226 sizet lastidx; 4227 int r; 4228 / First, fetch a line. / 4229 do 4230 datalen =...

Tor: libevent (stack) buffer overflow in evutil_parse_sockaddr_port

in evutil.c: c 1798 char buf128; ... ... 1809 cp = strchripasstring, ':'; 1810 if ipasstring == '' 1811 int len; 1812 if !cp = strchripasstring, '' 1813 return -1; 1814 1815 len = int cp-ipasstring + 1 ; 1816 if len intsizeofbuf-1 1817 return -1; 1818 1819 memcpybuf, ipasstring+1, len; Length...

Tor: [tor] libevent dns remote stack overread vulnerability

Hello, the nameparse function in libevent's DNS code is vulnerable to a buffer overread. c 935 static int 936 nameparseu8 packet, int length, int idx, char nameout, int nameoutlen 937 int nameend = -1; 938 int j = idx; 939 int ptrcount = 0; 940 define GET32x do if j + 4 length goto err; memcpy&t3...

CVE-2007-1030

Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service infinite loop via a DNS response containing a label pointer that references its own offset...

Gentoo Security Advisory GLSA 201502-07

Gentoo Linux Local Security Checks GLSA 201502-07 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Vulnerabilities in the Libevent library, which allow a hacker to cause a service failure

The multiple vulnerabilities of the evbuffer software interface functions evbufferadd, evbufferprepend, evbufferexpand, exbufferreservespace, or evbufferread in the Libevent library are caused by integer overflows, which lead to overflow of buffers in dynamic memory or circularization. Exploitati...

Libevent evbuffer API Integer Overflow Vulnerability

Libevent is a library of asynchronous event processing software developed by software developers Nick Mathewson and Niels Provos, which allows you to set up functions to be executed when certain events occur through an application programming interface API. An integer overflow vulnerability exist...

DEBIAN-CVE-2015-6525

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2 evbufferprepend, 3 evbufferexpand...

CVE-2015-6525

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2 evbufferprepend, 3 evbufferexpand...

CVE-2015-6525

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2 evbufferprepend, 3 evbufferexpand...

DEBIAN-CVE-2014-6272

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the 1 evbufferadd, 2...