CVE-2015-6525

Source
https://nvd.nist.gov/vuln/detail/CVE-2015-6525
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2015-6525.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2015-6525
Downstream
Published
2015-08-24T14:59:14Z
Modified
2025-08-09T20:01:27Z
Summary
[none]
Details

Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbufferadd, (2) evbufferprepend, (3) evbufferexpand, (4) exbufferreservespace, or (5) evbufferread function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.

References

Affected packages