CVE-2014-6272
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0...
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
Exploit likelihood
What each source reports
NVD Score used
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
CVE-2014-6272- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
CVE-2014-6272- Updated
- 2026-11-02
EUVDEUVD-2014-6158 No score
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
EUVD-2014-6158- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-246p-m32j-f38r No score
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0...
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
GHSA-246p-m32j-f38r- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
CVE-2014-6272- Updated
- 2026-11-02
OSVDEBIAN-CVE-2014-6272 No score
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
DEBIAN-CVE-2014-6272- Updated
- 2026-11-02
Show 5 moreShow less
OSVMGASA-2015-0009 No score
Updated libevent packages fix CVE-2014-6272
Updated libevent packages fix security vulnerability:
Andrew Bartlett of Catalyst reported a defect affecting certain applications using the Libevent evbuffer API. This defect leaves applications which pass insanely large inputs to evbuffers open to a possible heap overflow or infinite loop. In order to exploit this flaw, an attacker needs to be able to find a way to provoke the program into trying to make a buffer chunk larger than what will fit into a single size_t or off_t (CVE-2014-6272).
- Record
MGASA-2015-0009- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10236-1 No score
libevent-2_0-5-2.0.22-2.7 on GA media
These are all security issues fixed in the libevent-2_0-5-2.0.22-2.7 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10236-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10720-1 No score
dnscrypt-proxy-2.1.0-1.2 on GA media
These are all security issues fixed in the dnscrypt-proxy-2.1.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10720-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-6272 No score
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later.
- Record
UBUNTU-CVE-2014-6272- Updated
- 2026-11-02
OSVUSN-2477-1 No score
libevent vulnerability
Andrew Bartlett discovered that libevent incorrectly handled large inputs to the evbuffer API. A remote attacker could possibly use this issue with an application that uses libevent to cause a denial of service, or possibly execute arbitrary code.
- Record
USN-2477-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libeventDebian:12 |
before 2.0.21-stable-2 | 2.0.21-stable-2 |
libeventDebian:13 |
before 2.0.21-stable-2 | 2.0.21-stable-2 |
libeventDebian:14 |
before 2.0.21-stable-2 | 2.0.21-stable-2 |
libeventDebian:6.0 |
before 1.4.13-stable-1+deb6u1, plus listed versions 1.4.13-stable-1 |
1.4.13-stable-1+deb6u1 |
libeventDebian:7 From an advisory covering 2 CVEs |
before 2.0.19-stable-3+deb7u1, plus listed versions 2.0.19-stable-3 |
2.0.19-stable-3+deb7u1 |
libeventMageia:4 |
before 2.0.21-5.1.mga4 | 2.0.21-5.1.mga4 |
libeventUbuntu:14.04:LTS |
before 2.0.21-stable-1ubuntu1.14.04.1, plus listed versions 2.0.21-stable-12.0.21-stable-1ubuntu1 |
2.0.21-stable-1ubuntu1.14.04.1 |
dnscrypt-proxyopenSUSE:Tumbleweed |
before 2.1.0-1.2 | 2.1.0-1.2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-6272 is a high vulnerability (CVSS 7.5) in Libevent Project Libevent, published January 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.08%, the 81st percentile. Fixed in libevent 2.0.21-stable-2.
References
archives.seul.org/libevent/users/Jan-2015/msg00010.html
debian.org/security/2015/dsa-3119
puppet.com/security/cve/CVE-2014-6272
slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.366317
nvd.nist.gov/vuln/detail/CVE-2014-6272
github.com/advisories/GHSA-246p-m32j-f38r
Show 10 moreShow less
security-tracker.debian.org/tracker/CVE-2014-6272
advisories.mageia.org/MGASA-2015-0009.html
bugs.mageia.org/show_bug.cgi?id=14970
ubuntu.com/security/CVE-2014-6272
cve.org/CVERecord?id=CVE-2014-6272
suse.com/security/cve/CVE-2014-6272