libevent project records

5 published records for vendor libevent project.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2016-10195No exploit	The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving thlibevent project · libevent · CWE-125 Pre-auth Memory safety	Critical9.8	—	6.7%	Mar 15, 2017
32Monitor	CVE-2016-10196No exploit	Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause adebian · debian linux · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	5.2%	Mar 15, 2017
32Monitor	CVE-2016-10197No exploit	The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) viadebian · debian linux · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	5.2%	Mar 15, 2017
31Monitor	CVE-2015-6525No exploit	Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackersdebian · debian linux · CWE-189 Pre-auth	High7.5	—	4.8%	Aug 24, 2015
31Monitor	CVE-2014-6272No exploit	Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow contedebian · debian linux · CWE-189 Pre-auth	High7.5	—	2.1%	Aug 24, 2015

CVE-2016-10195
41Plan
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving th
CriticalCVSS 9.8No exploitEPSS 7%
- Pre-auth
- Memory safety
libevent project · libeventMar 15, 2017
CVE-2016-10196
32Monitor
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a
HighCVSS 7.5No exploitEPSS 5%
debian · debian linuxMar 15, 2017
CVE-2016-10197
32Monitor
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via
HighCVSS 7.5No exploitEPSS 5%
debian · debian linuxMar 15, 2017
CVE-2015-6525
31Monitor
Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers
HighCVSS 7.5No exploitEPSS 5%
- Pre-auth
debian · debian linuxAug 24, 2015
CVE-2014-6272
31Monitor
Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow conte
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
debian · debian linuxAug 24, 2015