libevent vulnerabilities (Debian)
13 vulnerabilities.
-
libeventDebian Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept 8.4 High -
libeventDebian Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response 7.0 High -
libeventDebian Libevent: HTTP header handling bugs create risk of access control bypass. 9.2 Critical -
libeventDebian Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. 8.7 High -
libeventDebian Libevent: decode_tag_internal() can lead to out-of-bounds read 8.7 High -
libeventDebian libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling 9.2 Critical -
libeventDebian Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` 5.8 Medium -
libeventDebian Libevent: HTTP Header smuggling 6.3 Medium -
libeventDebian The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a... 7.5 High -
libeventDebian Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent... 7.5 High -
libeventDebian The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have... 9.8 Critical -
libeventDebian Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2... 7.5 High -
libeventDebian Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0... 7.5 High