Read the docs
TI-2008-02267 Aliases CVE-2008-2363GHSA-6fv5-c23x-7g46

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data…

Priority MEDIUM 49CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
Code execution
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.

Why it matters now

EPSS 0.05849 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 28

CPEVersionsRoleVendor
cpe:2.3:a:pan:pan:*:*:*:*:*:*:*:*up to 0.132VulnerablePan
cpe:2.3:a:pan:pan:0.105:*:*:*:*:*:*:*0.105VulnerablePan
cpe:2.3:a:pan:pan:0.106:*:*:*:*:*:*:*0.106VulnerablePan
cpe:2.3:a:pan:pan:0.107:*:*:*:*:*:*:*0.107VulnerablePan
cpe:2.3:a:pan:pan:0.108:*:*:*:*:*:*:*0.108VulnerablePan
cpe:2.3:a:pan:pan:0.109:*:*:*:*:*:*:*0.109VulnerablePan
cpe:2.3:a:pan:pan:0.110:*:*:*:*:*:*:*0.110VulnerablePan
cpe:2.3:a:pan:pan:0.111:*:*:*:*:*:*:*0.111VulnerablePan
cpe:2.3:a:pan:pan:0.112:*:*:*:*:*:*:*0.112VulnerablePan
cpe:2.3:a:pan:pan:0.113:*:*:*:*:*:*:*0.113VulnerablePan
  • cpe:2.3:a:pan:pan:*:*:*:*:*:*:*:* Versions up to 0.132 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.105:*:*:*:*:*:*:* Versions 0.105 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.106:*:*:*:*:*:*:* Versions 0.106 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.107:*:*:*:*:*:*:* Versions 0.107 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.108:*:*:*:*:*:*:* Versions 0.108 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.109:*:*:*:*:*:*:* Versions 0.109 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.110:*:*:*:*:*:*:* Versions 0.110 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.111:*:*:*:*:*:*:* Versions 0.111 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.112:*:*:*:*:*:*:* Versions 0.112 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.113:*:*:*:*:*:*:* Versions 0.113 Vulnerable ·Pan
Show 18 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:pan:pan:0.114:*:*:*:*:*:*:*0.114VulnerablePan
cpe:2.3:a:pan:pan:0.115:*:*:*:*:*:*:*0.115VulnerablePan
cpe:2.3:a:pan:pan:0.116:*:*:*:*:*:*:*0.116VulnerablePan
cpe:2.3:a:pan:pan:0.117:*:*:*:*:*:*:*0.117VulnerablePan
cpe:2.3:a:pan:pan:0.118:*:*:*:*:*:*:*0.118VulnerablePan
cpe:2.3:a:pan:pan:0.119:*:*:*:*:*:*:*0.119VulnerablePan
cpe:2.3:a:pan:pan:0.120:*:*:*:*:*:*:*0.120VulnerablePan
cpe:2.3:a:pan:pan:0.121:*:*:*:*:*:*:*0.121VulnerablePan
cpe:2.3:a:pan:pan:0.122:*:*:*:*:*:*:*0.122VulnerablePan
cpe:2.3:a:pan:pan:0.123:*:*:*:*:*:*:*0.123VulnerablePan
cpe:2.3:a:pan:pan:0.124:*:*:*:*:*:*:*0.124VulnerablePan
cpe:2.3:a:pan:pan:0.125:*:*:*:*:*:*:*0.125VulnerablePan
cpe:2.3:a:pan:pan:0.126:*:*:*:*:*:*:*0.126VulnerablePan
cpe:2.3:a:pan:pan:0.127:*:*:*:*:*:*:*0.127VulnerablePan
cpe:2.3:a:pan:pan:0.128:*:*:*:*:*:*:*0.128VulnerablePan
cpe:2.3:a:pan:pan:0.129:*:*:*:*:*:*:*0.129VulnerablePan
cpe:2.3:a:pan:pan:0.130:*:*:*:*:*:*:*0.130VulnerablePan
cpe:2.3:a:pan:pan:0.131:*:*:*:*:*:*:*0.131VulnerablePan
  • cpe:2.3:a:pan:pan:0.114:*:*:*:*:*:*:* Versions 0.114 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.115:*:*:*:*:*:*:* Versions 0.115 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.116:*:*:*:*:*:*:* Versions 0.116 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.117:*:*:*:*:*:*:* Versions 0.117 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.118:*:*:*:*:*:*:* Versions 0.118 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.119:*:*:*:*:*:*:* Versions 0.119 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.120:*:*:*:*:*:*:* Versions 0.120 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.121:*:*:*:*:*:*:* Versions 0.121 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.122:*:*:*:*:*:*:* Versions 0.122 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.123:*:*:*:*:*:*:* Versions 0.123 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.124:*:*:*:*:*:*:* Versions 0.124 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.125:*:*:*:*:*:*:* Versions 0.125 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.126:*:*:*:*:*:*:* Versions 0.126 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.127:*:*:*:*:*:*:* Versions 0.127 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.128:*:*:*:*:*:*:* Versions 0.128 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.129:*:*:*:*:*:*:* Versions 0.129 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.130:*:*:*:*:*:*:* Versions 0.130 Vulnerable ·Pan
  • cpe:2.3:a:pan:pan:0.131:*:*:*:*:*:*:* Versions 0.131 Vulnerable ·Pan

Remediation

No fixed version listed by the sources yet.

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2008-2363
  2. 2026-10-03 Alias added: GHSA-6fv5-c23x-7g46

References

Patch 3

Advisory 3

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences