The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Multiple format string vulnerabilities in lib/silcclient/client_entry.c in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.10, and SILC Client before 1.1.8, allow remote attackers to execute arbitrary code via format string specifiers in a nickname field, related to the (1) silc_client_add_client, (2) silc_client_update_client, and (3) silc_client_nickname_format functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade silc-irssi-clientUpgrade silc-clientUpgrade silc-toolkit | Dec 10, 2025 | Sep 8, 2009 |
| Gentoo Linux | — | Upgrade net-im/silc-client.Upgrade net-im/silc-toolkit. | Oct 30, 2017 | Sep 10, 2009 |
| Suse | — | Upgrade silc-toolkitUpgrade silc-toolkit-devel | Feb 17, 2015 | Sep 10, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub