CVE-2014-6272

CVE-2014-6272 describes multiple integer overflows within the Libevent evbuffer API, specifically affecting versions 1.4.x, 2.0.x, and 2.1.x. These flaws, found in functions like evbuffer_add and bufferevent_write, can lead to a denial of service through heap-based buffer overflows or infinite loops when processing excessively large inputs. The vulnerability carries a CVSS score of 7.5, indicating a high severity with network-based attacks requiring low complexity and no authentication, potentially leading to partial confidentiality, integrity, and availability impacts. While the vulnerability is significant, there is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or notable community discussion or media coverage.