Unscored severity · published Jul 1, 2008
CVE-2008-2954
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an…
–
CVSS
3.7%
EPSS
No
On KEV
Description
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Direct Connect · Linux
0.686; 0.699; 0.700; 0.701; 0.702; 0.703; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2954
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2954
cvs.berlios.de
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/Changelog.txt
Exploit
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14&r2=1.15&sortby=date
dcplusplus.svn.sourceforge.net
http://dcplusplus.svn.sourceforge.net/viewvc/dcplusplus/dcplusplus/trunk/changelog.txt?r1=1027&r2=1026&pathrev=1027
secunia.com
http://secunia.com/advisories/30907
secunia.com
http://secunia.com/advisories/30918
www.securityfocus.com
http://www.securityfocus.com/bid/30037
More from Direct Connect
–
CVE-2008-2953
Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference