libevent vulnerabilities (Red Hat)
9 vulnerabilities.
-
libeventRed Hat Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames 7.5 High -
libeventRed Hat Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept 8.4 High -
libeventRed Hat Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response 7.0 High -
libeventRed Hat Libevent: HTTP header handling bugs create risk of access control bypass. 9.2 Critical -
libeventRed Hat Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. 8.7 High -
libeventRed Hat Libevent: decode_tag_internal() can lead to out-of-bounds read 8.7 High -
libeventRed Hat libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling 9.2 Critical -
libeventRed Hat Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` 5.8 Medium -
libeventRed Hat Libevent: HTTP Header smuggling 6.3 Medium