Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-5030
HistorySep 21, 2007 - 7:17 p.m.

Integer overflow

2007-09-2119:17:00
PRIOn knowledge base
www.prio-n.com

7.2 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.3%

Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing options with large lengths, which trigger attempts at excessive memory allocation, as demonstrated by (1) the TSrvMsg constructor in SrvMessages/SrvMsg.cpp; the (2) TClntMsg, (3) TClntOptIAAddress, (4) TClntOptIAPrefix, (5) TOptVendorSpecInfo, and (6) TOptOptionRequest constructors; and the (7) TRelIfaceMgr::decodeRelayRepl, (8) TRelMsg::decodeOpts, and (9) TSrvIfaceMgr::decodeRelayForw methods.

CPENameOperatorVersion
dibblereq0.6.0

7.2 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.3%

Related for PRION:CVE-2007-5030