CVE-2026-63387 | Libevent up to 2.1.12/2.2.1 DNS Server Request Formatting evdns.c dnsname_to_labels off-by-one

A vulnerability was found in Libevent up to 2.1.12/2.2.1 and classified as critical. Affected is the function dnsname_to_labels of the file evdns.c of the component DNS Server Request Formatting. The manipulation results in off-by-one.

This vulnerability is known as CVE-2026-63387. It is possible to launch the attack remotely. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More