Search CVE reports
1 – 6 of 6 results
CVE-2016-10197
Low prioritySome fixes available 13 of 14
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.
3 affected packages
firefox, libevent, thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | — | — | — | — | Fixed |
| libevent | — | — | — | — | Fixed |
| thunderbird | — | — | — | — | Fixed |
CVE-2016-10196
Medium prioritySome fixes available 13 of 14
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in...
3 affected packages
firefox, libevent, thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | — | — | — | — | Fixed |
| libevent | — | — | — | — | Fixed |
| thunderbird | — | — | — | — | Fixed |
CVE-2016-10195
Medium prioritySome fixes available 13 of 14
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.
3 affected packages
firefox, libevent, thunderbird
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| firefox | — | — | — | — | Fixed |
| libevent | — | — | — | — | Fixed |
| thunderbird | — | — | — | — | Fixed |
CVE-2015-6525
Medium priorityMultiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely...
1 affected package
libevent
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libevent | — | — | — | — | — |
CVE-2014-6272
Medium priorityMultiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified...
1 affected package
libevent
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libevent | — | — | — | — | — |
CVE-2007-1030
Unknown priorityNiels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service (infinite loop) via a DNS response containing a label pointer that references its own offset.
1 affected package
libevent
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| libevent | — | — | — | — | — |