rpm package
almalinux/libevent-doc
pkg:rpm/almalinux/libevent-doc
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-63388 | Hig | 8.4 | < 2.1.8-11.el8_10 | 2.1.8-11.el8_10 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in bufferevent_sock.c when bufferevent_socket_set_conn_address_ copies a kernel-supplied AF_UNIX peer address into bufferevent_private.conn_address. Release builds | |
| CVE-2026-63387 | Hig | 7.0 | < 2.1.8-11.el8_10 | 2.1.8-11.el8_10 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsname_to_labels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdns_server_request_format_response. | |
| CVE-2026-63385 | Cri | — | < 2.1.8-11.el8_10 | 2.1.8-11.el8_10 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttp_decode_uri_internal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a p | |
| CVE-2026-63384 | Hig | — | < 2.1.8-11.el8_10 | 2.1.8-11.el8_10 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in event_tagging.c when evtag_unmarshal_header uses evtag_decode_int to decode an attacker-controlled uint32 payload length and returns it as a signed int. Val | |
| CVE-2026-63383 | Hig | — | < 2.1.8-11.el8_10 | 2.1.8-11.el8_10 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in event_tagging.c when decode_tag_internal requests at most five bytes from evbuffer_pullup but iterates using the full logical buffer length. A frag | |
| CVE-2026-63382 | Cri | — | < 2.1.8-11.el8_10 | 2.1.8-11.el8_10 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding headers, comma-separated Transfer-Encoding values, and bare line feeds in chunked framing. evhttp_find_header can se | |
| CVE-2026-63381 | Med | — | < 2.1.13-1.el10_2 | 2.1.13-1.el10_2 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbuffer_add_buffer_reference processes an output buffer whose out_total_len is zero. evbuffer_free_all_chains frees the initial empty chain without resettin | |
| CVE-2026-63379 | Med | — | < 2.1.13-1.el10_2 | 2.1.13-1.el10_2 | Aug 20, 2026 | Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttp_read_trailer and merges them into request headers. The fix introduces evhttp_parse_headers_impl_ and a temporary trailer header list. An u |
- affected < 2.1.8-11.el8_10fixed 2.1.8-11.el8_10
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a heap out-of-bounds write in bufferevent_sock.c when bufferevent_socket_set_conn_address_ copies a kernel-supplied AF_UNIX peer address into bufferevent_private.conn_address. Release builds
- affected < 2.1.8-11.el8_10fixed 2.1.8-11.el8_10
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsname_to_labels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdns_server_request_format_response.
- affected < 2.1.8-11.el8_10fixed 2.1.8-11.el8_10
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing weaknesses in http.c. evhttp_decode_uri_internal decodes percent-encoded %00 bytes into literal NUL characters, which can cause downstream C string operations to truncate a p
- affected < 2.1.8-11.el8_10fixed 2.1.8-11.el8_10
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an incorrect integer conversion in event_tagging.c when evtag_unmarshal_header uses evtag_decode_int to decode an attacker-controlled uint32 payload length and returns it as a signed int. Val
- affected < 2.1.8-11.el8_10fixed 2.1.8-11.el8_10
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent can read beyond a contiguous evbuffer region in event_tagging.c when decode_tag_internal requests at most five bytes from evbuffer_pullup but iterates using the full logical buffer length. A frag
- affected < 2.1.8-11.el8_10fixed 2.1.8-11.el8_10
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, the libevent evhttp parser in http.c inconsistently handles duplicate Transfer-Encoding headers, comma-separated Transfer-Encoding values, and bare line feeds in chunked framing. evhttp_find_header can se
- affected < 2.1.13-1.el10_2fixed 2.1.13-1.el10_2
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has a use-after-free in buffer.c when evbuffer_add_buffer_reference processes an output buffer whose out_total_len is zero. evbuffer_free_all_chains frees the initial empty chain without resettin
- affected < 2.1.13-1.el10_2fixed 2.1.13-1.el10_2
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent processes chunked HTTP trailers in http.c through evhttp_read_trailer and merges them into request headers. The fix introduces evhttp_parse_headers_impl_ and a temporary trailer header list. An u