A vulnerability was found in libevent. The nameparse() function in libevent's DNS code is vulnerable to a buffer overread.
Upstream bug:
https://github.com/libevent/libevent/issues/317
Upstream patch:
https://github.com/libevent/libevent/commit/96f64a022014a208105ead6c8a7066018449d86d
A vulnerability was found in libevent. There is a stack-buffer overflow in evutil.c.
Upstream bug:
https://github.com/libevent/libevent/issues/318
Upstream patch:
https://github.com/libevent/libevent/commit/329acc18a0768c21ba22522f01a5c7f46cacc4d5
A vulnerability was found in libevent. There is an out-of-bounds read in the DNS code of Libevent.
Upstream bug:
https://github.com/libevent/libevent/issues/332
Upstream patch:
https://github.com/libevent/libevent/commit/ec65c42052d95d2c23d1d837136d1cf1d9ecef9e