libevent vulnerabilities (Mageia)
12 vulnerabilities.
-
libeventMageia Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept 8.4 High -
libeventMageia Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response 7.0 High -
libeventMageia Libevent: HTTP header handling bugs create risk of access control bypass. 9.2 Critical -
libeventMageia Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. 8.7 High -
libeventMageia Libevent: decode_tag_internal() can lead to out-of-bounds read 8.7 High -
libeventMageia libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling 9.2 Critical -
libeventMageia Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` 5.8 Medium -
libeventMageia Libevent: HTTP Header smuggling 6.3 Medium -
libeventMageia The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a... 7.5 High -
libeventMageia Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent... 7.5 High -
libeventMageia The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have... 9.8 Critical -
libeventMageia Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0... 7.5 High