Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Cypherpunks Component: Libotr Clear all filters
TI-2016-02392 CVE-2016-2851 · GHSA-p3jg-fm9x-hc9c

Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote…

Priority MEDIUM 63

Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR me…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.24283 Published 2016-04-07 No fix listed CWE-119
TI-2012-02989 CVE-2012-3461 · GHSA-gwfv-2hfv-wqmr

The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and…

Priority LOW 26

The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03441 Published 2012-08-20 No fix listed CWE-119