5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.034 Low
EPSS
Percentile
91.4%
Dibbler 0.6.0 does not verify that certain length parameters are
appropriate for buffer sizes, which allows remote attackers to trigger a
buffer over-read and cause a denial of service (daemon crash), as
demonstrated by incorrect behavior of the TSrvMsg constructor in
SrvMessages/SrvMsg.cpp when (1) reading the option code and option length
and (2) parsing options.