Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data. NOTE: some of these details are obtained from third party information.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade net-im/silc-server.Upgrade net-im/silc-client.Upgrade net-im/silc-toolkit. | Oct 30, 2017 | Mar 10, 2008 |
| Suse | — | Upgrade libsilcclient-1_1-3Upgrade silc-toolkit-develUpgrade silc-toolkitUpgrade libsilc-1_1-2 | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade silc-toolkit | Nov 19, 2024 | Mar 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub