Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbufferadd, (2) evbufferprepend, (3) evbufferexpand, (4) exbufferreservespace, or (5) evbufferread function, which triggers a heap-based buffer overflow or an infinite loop. NOTE: this identifier was SPLIT from CVE-2014-6272 per ADT3 due to different affected versions.
{ "availability": "No subscription required", "ubuntu_priority": "medium", "binaries": [ { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-2.0-5" }, { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-core-2.0-5" }, { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-dbg" }, { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-dev" }, { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-extra-2.0-5" }, { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-openssl-2.0-5" }, { "binary_version": "2.0.21-stable-1ubuntu1.14.04.1", "binary_name": "libevent-pthreads-2.0-5" } ] }