CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

CSIRTSSecurity advisory fusion

← All products & vendors

Libevent — security advisories

7 advisorieslatest 2026-08-11⚡ RSS feed

Tracked Libevent products:

⚡ Watch Libevent

Get an email when a new Libevent advisory drops — max one per day, one-click unsubscribe.

CVE-2026-63379: Libevent: HTTP Header smuggling

unknownCVE-2026-63379msrc2026-08-11

CVE-2026-63381: Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`

unknownCVE-2026-63381msrc2026-08-11

CVE-2026-63383: Libevent: decode_tag_internal() can lead to out-of-bounds read

unknownCVE-2026-63383msrc2026-08-11

CVE-2026-63384: Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.

unknownCVE-2026-63384msrc2026-08-11

CVE-2026-63385: Libevent: HTTP header handling bugs create risk of access control bypass.

unknownCVE-2026-63385msrc2026-08-11

CVE-2026-63387: Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

highCVSS 7CVE-2026-63387msrc2026-08-11

CVE-2026-63388: Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

highCVSS 8.4CVE-2026-63388msrc2026-08-11