libevent vulnerabilities (Ubuntu)
14 vulnerabilities.
-
libeventUbuntu Libevent: Null Pointer Dereference in `evws_new_session` 5.7 Medium -
libeventUbuntu Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept 8.4 High -
libeventUbuntu Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response 7.0 High -
libeventUbuntu Libevent: HTTP header handling bugs create risk of access control bypass. 9.2 Critical -
libeventUbuntu Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. 8.7 High -
libeventUbuntu Libevent: decode_tag_internal() can lead to out-of-bounds read 8.7 High -
libeventUbuntu libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling 9.2 Critical -
libeventUbuntu Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` 5.8 Medium -
libeventUbuntu Libevent: HTTP Header smuggling 6.3 Medium -
libeventUbuntu The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a... 7.5 High -
libeventUbuntu Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent... 7.5 High -
libeventUbuntu The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have... 9.8 Critical -
libeventUbuntu Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2... 7.5 High -
libeventUbuntu Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0... 7.5 High