Cypherpunks Libotr vulnerabilities
2 known vulnerabilities affecting cypherpunks/libotr.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2016-2851P2CRITICALCVSS 9.8PoC≤ 4.1.02016-04-07
CVE-2016-2851 [CRITICAL] CWE-119 CVE-2016-2851: Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to ca
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
nvdosv
CVE-2012-3461P4MEDIUMCVSS 4.3≤ 3.2.0v3.1.02012-08-20
CVE-2012-3461 [MEDIUM] CWE-119 CVE-2012-3461: The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_pr
The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a denial of service (application crash) via
nvdosv