CVE-2008-1227

2008-03-1017:44:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-1227

silc toolkit

buffer overflow

denial of service

remote attackers

nvd

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8.1

Confidence

Low

EPSS

0.168

Percentile

96.1%

JSON

Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via long input data. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

silcsilc_toolkitRange≤1.1.5

silcsilc_toolkitMatch1.1

silcsilc_toolkitMatch1.1.1

silcsilc_toolkitMatch1.1.2

silcsilc_toolkitMatch1.1.3

silcsilc_toolkitMatch1.1.4

VendorProductVersionCPE
silcsilc_toolkit*cpe:2.3:a:silc:silc_toolkit:*:*:*:*:*:*:*:*
silcsilc_toolkit1.1cpe:2.3:a:silc:silc_toolkit:1.1:*:*:*:*:*:*:*
silcsilc_toolkit1.1.1cpe:2.3:a:silc:silc_toolkit:1.1.1:*:*:*:*:*:*:*
silcsilc_toolkit1.1.2cpe:2.3:a:silc:silc_toolkit:1.1.2:*:*:*:*:*:*:*
silcsilc_toolkit1.1.3cpe:2.3:a:silc:silc_toolkit:1.1.3:*:*:*:*:*:*:*
silcsilc_toolkit1.1.4cpe:2.3:a:silc:silc_toolkit:1.1.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
silc	silc_toolkit	*	cpe:2.3:a:silc:silc_toolkit::::::::
silc	silc_toolkit	1.1	cpe:2.3:a:silc:silc_toolkit:1.1:::::::*
silc	silc_toolkit	1.1.1	cpe:2.3:a:silc:silc_toolkit:1.1.1:::::::*
silc	silc_toolkit	1.1.2	cpe:2.3:a:silc:silc_toolkit:1.1.2:::::::*
silc	silc_toolkit	1.1.3	cpe:2.3:a:silc:silc_toolkit:1.1.3:::::::*
silc	silc_toolkit	1.1.4	cpe:2.3:a:silc:silc_toolkit:1.1.4:::::::*