01 Record

CVE-2026-63387

Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

HighPUBLISHEDCNA: GitHub_M

Base score7.0 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

02 Description

Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response

Published

2026-08-20 17:53Z1 DAY AGO

Last updated

2026-08-20 17:53Z1 DAY AGO

Reserved

2026-07-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 7.0)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

9a7d8cd4fdf56a5bd70be3c59dd44d45b974413ff7a16954aed6fcf31d54e158

VendorProductVersionsPlatforms

libeventlibevent>= 2.2.0-alpha, < 2.2.2-alpha, < 2.1.13—