Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to…
Priority MEDIUM 42CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via (1) the raydium_log function in log.c or (2) the raydium_console_line_add function in console.c, possibly from a long player name.
Why it matters now
EPSS 0.06173 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:* | svn_revision_283 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:* | svn_revision_284 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:* | svn_revision_285 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:* | svn_revision_286 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:* | svn_revision_287 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:* | svn_revision_288 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:* | svn_revision_289 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:* | svn_revision_290 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:* | svn_revision_291 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:* | svn_revision_292 | Vulnerable | Raydium |
- cpe:2.3:a:raydium:raydium:svn_revision_283:*:*:*:*:*:*:* Versions svn_revision_283 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_284:*:*:*:*:*:*:* Versions svn_revision_284 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_285:*:*:*:*:*:*:* Versions svn_revision_285 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_286:*:*:*:*:*:*:* Versions svn_revision_286 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_287:*:*:*:*:*:*:* Versions svn_revision_287 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_288:*:*:*:*:*:*:* Versions svn_revision_288 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_289:*:*:*:*:*:*:* Versions svn_revision_289 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_290:*:*:*:*:*:*:* Versions svn_revision_290 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_291:*:*:*:*:*:*:* Versions svn_revision_291 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_292:*:*:*:*:*:*:* Versions svn_revision_292 Vulnerable ·Raydium
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:* | svn_revision_293 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:* | svn_revision_294 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:* | svn_revision_295 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:* | svn_revision_296 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:* | svn_revision_297 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:* | svn_revision_298 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:* | svn_revision_299 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:* | svn_revision_300 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:* | svn_revision_301 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:* | svn_revision_302 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:* | svn_revision_303 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:* | svn_revision_304 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:* | svn_revision_305 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:* | svn_revision_306 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:* | svn_revision_307 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:* | svn_revision_308 | Vulnerable | Raydium |
| cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:* | svn_revision_309 | Vulnerable | Raydium |
- cpe:2.3:a:raydium:raydium:svn_revision_293:*:*:*:*:*:*:* Versions svn_revision_293 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_294:*:*:*:*:*:*:* Versions svn_revision_294 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_295:*:*:*:*:*:*:* Versions svn_revision_295 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_296:*:*:*:*:*:*:* Versions svn_revision_296 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_297:*:*:*:*:*:*:* Versions svn_revision_297 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_298:*:*:*:*:*:*:* Versions svn_revision_298 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_299:*:*:*:*:*:*:* Versions svn_revision_299 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_300:*:*:*:*:*:*:* Versions svn_revision_300 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_301:*:*:*:*:*:*:* Versions svn_revision_301 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_302:*:*:*:*:*:*:* Versions svn_revision_302 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_303:*:*:*:*:*:*:* Versions svn_revision_303 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_304:*:*:*:*:*:*:* Versions svn_revision_304 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_305:*:*:*:*:*:*:* Versions svn_revision_305 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_306:*:*:*:*:*:*:* Versions svn_revision_306 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_307:*:*:*:*:*:*:* Versions svn_revision_307 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_308:*:*:*:*:*:*:* Versions svn_revision_308 Vulnerable ·Raydium
- cpe:2.3:a:raydium:raydium:svn_revision_309:*:*:*:*:*:*:* Versions svn_revision_309 Vulnerable ·Raydium
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2006-2408
- 2026-10-03 Alias added: GHSA-rqwq-2jg6-vhmj
References
More Raydium vulnerabilities
- TI-2006-02347 Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312… CVSS 2.0HIGH 7.5
- TI-2006-02348 The raydium_network_read function in network.c in Raydium SVN revision 312 and earlier… CVSS 2.0MEDIUM 5.0
- TI-2006-02346 raydium_network_netcall_exec function in network.c in Raydium SVN revision 312 and… CVSS 2.0MEDIUM 5.0
- TI-2006-02345 Format string vulnerability in the raydium_log function in console.c in Raydium before… CVSS 2.0MEDIUM 4.6
Sources
- CVE-2006-2408 · CVE Program
- CVE-2006-2408 · NVD
- FIRST EPSS
- GHSA-rqwq-2jg6-vhmj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences