CVE-2026-63387
Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsname_to_labels formats a name-bearing DNS record at the end of the 64 KB stack buffer allocated by evdns_server_request_format_response. The final-label check permits j plus label_len plus one to equal buf_len, after which the terminating null byte is written to buf[buf_len]. A crafted DNS server response containing PTR, CNAME, MX, NS, or SOA data can trigger the one-byte out-of-bounds write and crash or corrupt the process. This issue is fixed in versions 2.1.13 and 2.2.2-alpha.
Scoring
- Severity
- HIGH
- CVSS base score
- 7
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
- EPSS probability
- 0.34%
- CWE
- CWE-121, CWE-193, CWE-787
- Published
- 2026-08-20
- Last modified
- 2026-08-25
Affected products
- libevent libevent
- libevent libevent
Weakness type
Related vulnerabilities
- CVE-2026-86093 — IBM® Db2® federated server could allow an attacker with the ability to control or impersonate a DRDA server endpoint to execute arbitrary commands under certain conditions
- CVE-2026-15419 — CP210x Driver Memory Corruption results in Arbitrary Code Execution
- CVE-2026-88047 — Tesseract: ReadNormProtos stack buffer overflow
- CVE-2026-42805 — A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C...
- CVE-2026-42804 — A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360...
- CVE-2026-88289 — GV-LPC2011/LPC2211 - Multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers
- CVE-2026-88287 — GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow Denial of Service
- CVE-2026-88284 — GV-LPC2011/LPC2211 - ONVIF SetUser Repeated-Element Stack-Frame Overflow Denial of Service