Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2008-7159

libsilc: stack corruption during ASN1 encoding of OID

The silc_asn1_encoder function in lib/silcasn1/silcasn1_encode.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.8 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted OID value, related to incorrect use of a %lu format string.

CVSS 2.0 · 5.8 Medium EPSS 3.4% KEV · Not listed
Vendors
Silcnet
Products
Silc Toolkit
CVE-2008-7160

libsilc: stack corruption in SilcHttpServer on 64bit archs

The silc_http_server_parse function in lib/silchttp/silchttpserver.c in the internal HTTP server in silcd in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.9 allows remote attackers to overwrite a stack location and possibly execute arbitrary code via a crafted Content-Length header, related to incorrect use of a %lu format string.

CVSS 2.0 · 5.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Silcnet
Products
Silc Toolkit
CVE-2009-3051

libsilc: multiple format string issues in handling of client entry (CVE-2009-3051) and channel name (CVE-2009-3163)

Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions.

CVSS 2.0 · 7.5 High EPSS 4.8% KEV · Not listed
Vendors
Silcnet
Products
Silc Client Silc Toolkit
CVE-2009-3163

libsilc: multiple format string issues in handling of client entry (CVE-2009-3051) and channel name (CVE-2009-3163)

Multiple format string vulnerabilities in lib/silcclient/command.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client 1.1.8 and earlier, allow remote attackers to execute arbitrary code via format string specifiers in a channel name, related to (1) silc_client_command_topic, (2) silc_client_command_kick, (3) silc_client_command_leave, and (4) silc_client_command_users.

CVSS 2.0 · 7.5 High EPSS 4.5% KEV · Not listed
Vendors
Silcnet
Products
Silc Client Silc Toolkit