Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Toktok Component: Toxcore Clear all filters
TI-2021-20291 CVE-2021-44847 · GHSA-62pr-4hg6-fwph

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9…

Priority MEDIUM 49

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04135 Published 2021-12-13 No fix listed CWE-682
TI-2018-15249 CVE-2018-25022 · GHSA-47vr-crpx-w72f

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be…

Priority LOW 18

The Onion module in toxcore before 0.2.2 doesn't restrict which packets can be onion-routed, which allows a remote attacker to discover a target user's IP address (when knowing only their Tox Id) by positioning themselve…

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.01555 Published 2021-12-13 No fix listed CWE-200