Known vulnerabilities in libevent (Ubuntu package)

Vendor: Canonical Ltd.
Software: libevent (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:libevent_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libevent (Ubuntu package) libevent (Ubuntu package) is affected by 7 known vulnerabilities: 5 medium, 2 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU136949 - Expired pointer dereference
CVE-2026-63381		 CWE-825 Low
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm1, 2.0.21-stable-1ubuntu1.14.04.2+esm1, 2.1.8-stable-4ubuntu0.1~esm1, 2.1.11-stable-1ubuntu0.1~esm1, 2.1.12-stable-1ubuntu0.1, 2.1.12-stable-10ubuntu0.1, 2.1.12-stable-9ubuntu2.1 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 6 more
#VU136946 - Improper input validation
CVE-2026-63382		 CWE-20 Medium
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm1, 2.0.21-stable-1ubuntu1.14.04.2+esm1, 2.1.8-stable-4ubuntu0.1~esm1, 2.1.11-stable-1ubuntu0.1~esm1, 2.1.12-stable-1ubuntu0.1, 2.1.12-stable-10ubuntu0.1, 2.1.12-stable-9ubuntu2.1 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 8 more
#VU136944 - Out-of-bounds read
CVE-2026-63383		 CWE-125 Medium
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm1, 2.0.21-stable-1ubuntu1.14.04.2+esm1, 2.1.8-stable-4ubuntu0.1~esm1, 2.1.11-stable-1ubuntu0.1~esm1, 2.1.12-stable-1ubuntu0.1, 2.1.12-stable-10ubuntu0.1, 2.1.12-stable-9ubuntu2.1 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136943 - Integer overflow
CVE-2026-63384		 CWE-190 Medium
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm1, 2.0.21-stable-1ubuntu1.14.04.2+esm1, 2.1.8-stable-4ubuntu0.1~esm1, 2.1.11-stable-1ubuntu0.1~esm1, 2.1.12-stable-1ubuntu0.1, 2.1.12-stable-10ubuntu0.1, 2.1.12-stable-9ubuntu2.1 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 9 more
#VU136941 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-63385		 CWE-444 Medium
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm1, 2.0.21-stable-1ubuntu1.14.04.2+esm1, 2.1.8-stable-4ubuntu0.1~esm1, 2.1.11-stable-1ubuntu0.1~esm1, 2.1.12-stable-1ubuntu0.1, 2.1.12-stable-10ubuntu0.1, 2.1.12-stable-9ubuntu2.1 06.07.2026 SB2026070660
SB2026082166
SB20260902100
and 8 more
#VU136940 - Stack-based buffer overflow
CVE-2026-63387		 CWE-121 Medium
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm2, 2.0.21-stable-1ubuntu1.14.04.2+esm2, 2.1.8-stable-4ubuntu0.1~esm2, 2.1.11-stable-1ubuntu0.1~esm2, 2.1.12-stable-1ubuntu0.2, 2.1.12-stable-10ubuntu0.2, 2.1.12-stable-9ubuntu2.2 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 9 more
#VU136938 - Out-of-bounds write
CVE-2026-63388		 CWE-787 Low
No
No
 2.0.21-stable-2ubuntu0.16.04.1+esm2, 2.0.21-stable-1ubuntu1.14.04.2+esm2, 2.1.8-stable-4ubuntu0.1~esm2, 2.1.11-stable-1ubuntu0.1~esm2, 2.1.12-stable-1ubuntu0.2, 2.1.12-stable-10ubuntu0.2, 2.1.12-stable-9ubuntu2.2 06.07.2026 SB2026070660
SB2026082166
SB20260907102
and 8 more