CVE-2008-2954

Currently unrated

Key Information:

Vendor
Linux
Status
Direct Connect
Vendor
CVE Published:
1 July 2008

Summary

client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/43566
vdb-entryx_refsource_XF
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linux...
x_refsource_CONFIRM
https://www.redhat.com/archives/fedora-package-announce/2...
vendor-advisoryx_refsource_FEDORA

EPSS Score

3% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.