CVE-2006-2971

2006-06-1220:00:00

mitre

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.194 Low

EPSS

Percentile

96.3%

JSON

Integer overflow in the recv_packet function in 0verkill 0.16 allows remote attackers to cause a denial of service (daemon crash) via a UDP packet with fewer than 12 bytes, which results in a long length value to the crc32 function.

References

secunia.com/advisories/20551

securityreason.com/securityalert/1090

www.osvdb.org/26029

www.securityfocus.com/archive/1/436659/100/0/threaded

www.securityfocus.com/bid/18353

www.vupen.com/english/advisories/2006/2245

exchange.xforce.ibmcloud.com/vulnerabilities/27028