7.8
CVE-2008-2954
- EPSS 3.24%
- Veröffentlicht 01.07.2008 22:41:00
- Zuletzt bearbeitet 09.04.2025 00:30:58
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Direct Connect Version0.686
Linux ≫ Direct Connect Version0.699
Linux ≫ Direct Connect Version0.700
Linux ≫ Direct Connect Version0.701
Linux ≫ Direct Connect Version0.702
Linux ≫ Direct Connect Version0.703
Linux ≫ Direct Connect Version0.704
Linux ≫ Direct Connect Version0.705
Linux ≫ Direct Connect Version0.706
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.24% | 0.866 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 10 | 6.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:C
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.