TO
Product
Toxcore
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 0Low 1
Watch
Add Toxcore to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44847 | 9.8 | Dec 13 | A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the… Affected: 0.1.9 through 0.1.11; 0.2.0 through 0.2.12 |
| CVE-2018-25021 | 7.5 | Dec 13 | The TCP Server module in toxcore before 0.2.8 doesn't free the TCP priority queue under certain conditions, which allows a remote attacker to exhaust the system's memory, causing… Affected: before 0.2.8 |
| CVE-2018-25022 | 3.1 | Dec 13 | The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing… Affected: before 0.2.2 |
Showing 3
