https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T23:01:27.776354+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-12657 bdu:2026-12657 2026-10-03T23:01:27.850014+00:00 bdu:2026-12657 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1233 certfr-2026-avi-1233 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T23:01:27.850059+00:00 certfr-2026-avi-1233 https://cve.radiocsirt.org/vuln/euvd-2026-358734 EUVD-2026-358734 2026-10-03T23:01:27.850079+00:00 EUVD-2026-358734 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63380 fkie_cve-2026-63380 2026-10-03T23:01:27.850092+00:00

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evws_new_session enters its error path after evhttp_start_ws_ succeeds but bufferevent_enable_locking_ fails. evws_connection_free sees a non-null http_server and unconditionally calls TAILQ_REMOVE even though the session was never inserted into http_server->ws_sessions. A local caller able to induce this allocation or locking failure can crash the process. This issue is fixed in version 2.2.2-alpha.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-63380 UBUNTU-CVE-2026-63380 2026-10-03T23:01:27.850124+00:00

Affected: Ubuntu:Pro:14.04:LTS: libevent, Ubuntu:Pro:16.04:LTS: libevent, Ubuntu:Pro:18.04:LTS: libevent, Ubuntu:Pro:20.04:LTS: libevent, Ubuntu:22.04:LTS: libevent, Ubuntu:24.04:LTS: libevent, Ubuntu:26.04:LTS: libevent

Libevent is an event notification library. Prior to 2.2.2-alpha, libevent can dereference invalid list pointers in ws.c when evws_new_session enters its error path after evhttp_start_ws_ succeeds but bufferevent_enable_locking_ fails. evws_connection_free sees a non-null http_server and unconditionally calls TAILQ_REMOVE even though the session was never inserted into http_server->ws_sessions. A local caller able to induce this allocation or locking failure can crash the process. This issue is fixed in version 2.2.2-alpha.