Search for packages
| purl | pkg:deb/debian/libevent@1.4.13-stable-1 |
| Next non-vulnerable version | 2.0.21-stable-3 |
| Latest non-vulnerable version | 2.0.21-stable-3 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-76bw-4hry-77bq
Aliases: CVE-2016-10195 |
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read. |
Affected by 1 other vulnerability. |
|
VCID-9mdg-1dc3-dueg
Aliases: CVE-2014-6272 |
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_expand, or (3) bufferevent_write function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier has been SPLIT per ADT3 due to different affected versions. See CVE-2015-6525 for the functions that are only affected in 2.0 and later. |
Affected by 3 other vulnerabilities. |
|
VCID-h47s-xx3j-33eq
Aliases: CVE-2016-10196 |
Three vulnerabilities were reported in the Libevent library that allow for out-of-bounds reads and denial of service (DoS) attacks. These were fixed in the Libevent library and these changes were ported to Mozilla code. |
Affected by 1 other vulnerability. Affected by 0 other vulnerabilities. |
|
VCID-mhtm-6myj-5yax
Aliases: CVE-2015-6525 |
Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_expand, (4) exbuffer_reserve_space, or (5) evbuffer_read function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions. |
Affected by 3 other vulnerabilities. |
|
VCID-rhx2-e6nu-vyc9
Aliases: CVE-2016-10197 |
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||