Product by Debian

    Libevent

    13 known vulnerabilities in Libevent (Debian), 0 of them actively exploited (CISA KEV).

    Key figures

    13

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Libevent (Debian)
    CriticalCVE-2016-10195

    Libevent Project Libevent: Out-of-Bounds Access

    also in 2 other products

    9.8
    HighCVE-2016-10196

    Libevent Project Libevent: Stack-Based Buffer Overflow

    also in 4 other products

    7.5
    HighCVE-2016-10197

    Libevent Project Libevent: Out-of-Bounds Read

    also in 2 other products

    7.5
    CriticalCVE-2026-63382

    libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling

    also in 2 other products

    —
    CriticalCVE-2026-63385

    Libevent: HTTP Request/Response Smuggling

    also in 2 other products

    —
    HighCVE-2026-63384

    Libevent: Integer Overflow or Wraparound

    also in 2 other products

    —
    HighCVE-2026-63383

    Libevent: decode_tag_internal() can lead to out-of-bounds read

    also in 2 other products

    —
    MediumCVE-2026-63379

    Libevent: HTTP Header smuggling

    also in 2 other products

    —
    HighCVE-2026-63387

    Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

    also in 3 other products

    7.0
    Not ratedCVE-2015-6525

    Libevent Project Libevent: Heap-Based Buffer Overflow

    also in 2 other products

    —
    HighCVE-2026-63388

    Libevent: Reachable Assertion

    also in 4 other products

    8.4
    Not ratedCVE-2014-6272

    Libevent Project Libevent: Heap-Based Buffer Overflow

    also in 2 other products

    —
    MediumCVE-2026-63381

    Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`

    also in 2 other products

    —

    All products by Debian