CVE-2011-5268

CVE-2011-5268 affects Bip before 0.8.9. The issue is that connection.c does not properly close sockets, causing SSL handshake errors to be written to a file descriptor that was previously stderr when the process is running as a daemon. This can lead to denial of service via file descriptor exhaus...

CVE-2013-4550

CVE-2013-4550 is linked to the split from CVE-2011-5268. Connected sources describe the underlying issue as: in Bip before 0.8.9, sockets are not properly closed, allowing denial-of-service via file descriptor exhaustion and crash due to multiple failed SSL handshakes. Affected product/version: B...

CVE-2012-0806

CVE-2012-0806 : Buffer overflow in Bip 0.8.8 and earlier can allow remote authenticated users to execute arbitrary code through a sequence of TCP connections that triggers excessive file descriptors. Public references in multiple advisories (Debian DSA-2393-1, Mandriva MDVSA-2013:063, Fedora upda...

CVE-2010-3071

CVE-2010-3071 affects bip, a multi-user IRC proxy with SSL support. The vulnerability is a NULL pointer dereference in bip when processing an empty USER command, allowing a remote attacker to cause a daemon crash (DoS) on affected installations. The issue is present in versions prior to 0.8.6. Re...