libevent

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

libevent records in CISA KEV

No libevent vulnerabilities are listed in CISA KEV.

Records

10 records

TI-2026-45182 CVE-2026-63382

libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling

HIGH 81

Libevent is an event notification library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01991 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-444

TI-2026-45184 CVE-2026-63384

Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.

HIGH 77

Libevent is an event notification library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00488 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-190

TI-2026-45183 CVE-2026-63383

Libevent: decode_tag_internal() can lead to out-of-bounds read

HIGH 77

Libevent is an event notification library.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00488 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-125

TI-2026-45237 CVE-2026-63495

Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames

HIGH 72

Libevent is an event notification library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-08-20 Partial fix · 2.2.2-alpha CWE-400

TI-2026-45187 CVE-2026-63387

Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

MEDIUM 64

Libevent is an event notification library.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00416 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-121

TI-2026-45180 CVE-2026-63380

Libevent: Null Pointer Dereference in `evws_new_session`

MEDIUM 59

Libevent is an event notification library.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.0014 Published 2026-08-20 Partial fix · 2.2.2-alpha CWE-416

TI-2026-45185 CVE-2026-63385

Libevent: HTTP header handling bugs create risk of access control bypass.

MEDIUM 42

Libevent is an event notification library.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.01292 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-444

TI-2026-45188 CVE-2026-63388

Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept

LOW 37

Libevent is an event notification library.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00142 Published 2026-08-20 Partial fix · 2.1.13, 2.2.2-alpha CWE-617

TI-2026-45179 CVE-2026-63379

Libevent: HTTP Header smuggling

LOW 35

Libevent is an event notification library.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00518 Published 2026-08-20 Partial fix · 2.1.13, 2.2.2-alpha CWE-444

TI-2026-45181 CVE-2026-63381

Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`

LOW 25

Libevent is an event notification library.

CVSS 4.0MEDIUM 5.8 Local Low privileges No interaction EPSS 0.00121 Published 2026-08-20 Partial fix · 2.2.2-alpha, 2.1.13 CWE-908

Open these records in search →