5

CVE-2008-2953

Exploit

Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference.

Data is provided by the National Vulnerability Database (NVD)
LinuxDirect Connect Version0.686
LinuxDirect Connect Version0.699
LinuxDirect Connect Version0.700
LinuxDirect Connect Version0.701
LinuxDirect Connect Version0.702
LinuxDirect Connect Version0.703
LinuxDirect Connect Version0.704
LinuxDirect Connect Version0.705
LinuxDirect Connect Version0.706
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.46% 0.846
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.