Libevent 2.2.2-alpha Security Advisory: Multiple Fixes (OOB, Integer Overflow, HTTP Smuggling)

Vulnerability Overview Libevent version 2.2.2-alpha includes multiple security fixes, primarily affecting the following modules: evbuffer, bufferevent, evtag, evrpc, evdns, evhttp, and evws. Impact Scope evws module: - Fixed a NULL pointer dereference issue in the error path of . - Fixed an unbounded memory accumulation issue caused by frame fragmentation. evtag and evrpc modules: - Fixed an out-of-bounds read issue in . - Fixed an integer overflow issue in . evhttp module: - Mitigated HTTP header smuggling attacks. - Restricted HTTP header parsing to prevent request smuggling. - Strictly handled CRLF and %00 characters in HTTP headers to prevent mismatch parsing attacks. - Fixed a heap out-of-bounds write issue that could occur when using AF_UNIX sockets and compiling Libevent. evbuffer module: - Fixed a dangling pointer issue in . evdns module: - Fixed an out-of-bounds write issue in during DNS response construction. Sample code: - Avoided the use of in . Remediation evws module: - Fixed a NULL pointer dereference issue in the error path of . - Fixed an unbounded memory accumulation issue caused by frame fragmentation. evtag and evrpc modules: - Fixed an out-of-bounds read issue in . - Fixed an integer overflow issue in . evhttp module: - Mitigated HTTP header smuggling attacks. - Restricted HTTP header parsing to prevent request smuggling. - Strictly handled CRLF and %00 characters in HTTP headers to prevent mismatch parsing attacks. - Fixed a heap out-of-bounds write issue that could occur when using AF_UNIX sockets and compiling Libevent. evbuffer module: - Fixed a dangling pointer issue in . evdns module: - Fixed an out-of-bounds write issue in during DNS response construction. Sample code: - Avoided the use of in . Other Fixes Enabled signal tests that were previously disabled due to errors. Fixed compilation issues in some samples and tests, and resolved several compiler warnings. Contributors Contributors include: mat-mo, sectroyer, and others. Assets No specific asset information provided. Summary Libevent version 2.2.2-alpha contains multiple security fixes addressing issues such as NULL pointer dereferences, out-of-bounds reads/writes, integer overflows, and dangling pointers across various modules. Affected users are advised to upgrade to this version as soon as possible to ensure security.

Goal Reached Thanks to every supporter — we hit 100%!

Libevent 2.2.2-alpha Security Advisory: Multiple Fixes (OOB, Integer Overflow, HTTP Smuggling)

More from this source