https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-10197.htmlhttps://patchthecve.com/cve/CVE-2016-10197.htmlWed, 17 Jun 2026 00:39:15 +0000HIGH 7.5: The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (out-of-bounds read) via an empty hostname.https://patchthecve.com/cve/CVE-2016-10196.htmlhttps://patchthecve.com/cve/CVE-2016-10196.htmlWed, 17 Jun 2026 00:39:15 +0000HIGH 7.5: Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.https://patchthecve.com/cve/CVE-2016-10195.htmlhttps://patchthecve.com/cve/CVE-2016-10195.htmlWed, 17 Jun 2026 00:39:15 +0000CRITICAL 9.8: The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via vectors involving the label_len variable, which triggers an out-of-bounds stack read.https://patchthecve.com/cve/CVE-2015-6525.htmlhttps://patchthecve.com/cve/CVE-2015-6525.htmlWed, 17 Jun 2026 00:31:00 +0000HIGH 7.5: Multiple integer overflows in the evbuffer API in Libevent 2.0.x before 2.0.22 and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_prepend, (3) evbuffer_https://patchthecve.com/cve/CVE-2014-6272.htmlhttps://patchthecve.com/cve/CVE-2014-6272.htmlWed, 17 Jun 2026 00:12:48 +0000HIGH 7.5: Multiple integer overflows in the evbuffer API in Libevent 1.4.x before 1.4.15, 2.0.x before 2.0.22, and 2.1.x before 2.1.5-beta allow context-dependent attackers to cause a denial of service or possibly have other unspecified impact via "insanely large inputs" to the (1) evbuffer_add, (2) evbuffer_