CVE-2014-6272

Libevent’s evbuffer API contains multiple integer overflows in affected versions: 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta. An attacker providing insanely large inputs to evbuffer_add, evbuffer_expand, or bufferevent_write can trigger a heap-based buffer overflow or a...

CVE-2015-6525

CVE-2015-6525 affects Libevent’s evbuffer API. Affected: Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta; also 1.4.x is split per ADT3 but not required for 2.0/2.1. The vulnerability arises from multiple integer overflows in functions including evbuffer_add, evbuffer_prepend, evbuffer_ex...