Search CVE reports

Toggle filters

1 – 6 of 6 results

CVE-2016-10197

Low priority

Some fixes available 13 of 14

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.

3 affected packages

firefox, libevent, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox — — — —
libevent — — — —
thunderbird — — — —
Show less packages

CVE-2016-10196

Medium priority

Some fixes available 13 of 14

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in...

3 affected packages

firefox, libevent, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox — — — —
libevent — — — —
thunderbird — — — —
Show less packages

CVE-2016-10195

Medium priority

Some fixes available 13 of 14

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.

3 affected packages

firefox, libevent, thunderbird

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
firefox — — — —
libevent — — — —
thunderbird — — — —
Show less packages

CVE-2015-6525

Medium priority
Fixed

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via “insanely...

1 affected package

libevent

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libevent — — — —
Show less packages

CVE-2014-6272

Medium priority
Fixed

Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified...

1 affected package

libevent

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libevent — — — —
Show less packages

CVE-2007-1030

Unknown priority
Not affected

Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service (infinite loop) via a DNS response containing a label pointer that references its own offset.

1 affected package

libevent

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
libevent — — — —
Show less packages