CVE-2008-1996 licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections.
MediumCVSS 5.0
EPSS 11.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| licq | = 0.61 | No fix listed |
| licq | = 0.71 | No fix listed |
| licq | = 0.75 | No fix listed |
| licq | = 0.75.1 | No fix listed |
| licq | = 0.75.2 | No fix listed |
| licq | = 0.75.3 | No fix listed |
| licq | = 0.75.3a | No fix listed |
| licq | = 0.75_991219 | No fix listed |
| licq | = 0.76 | No fix listed |
| licq | = 0.80 | No fix listed |
| licq | = 0.81 | No fix listed |
| licq | = 0.84a | No fix listed |
| licq | = 0.84b | No fix listed |
| licq | = 0.85 | No fix listed |
| licq | = 1.0 | No fix listed |
| licq | = 1.0.1 | No fix listed |
| licq | = 1.0.2 | No fix listed |
| licq | = 1.0.3 | No fix listed |
| licq | = 1.0.4 | No fix listed |
| licq | = 1.2 | No fix listed |
| licq | = 1.2.3 | No fix listed |
| licq | = 1.2.4 | No fix listed |
| licq | = 1.2.6 | No fix listed |
| licq | = 1.2.7 | No fix listed |
| licq | = 1.3.0 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| licq | = 1.3.0_pre | No fix listed |
| licq | = 1.3.2 | No fix listed |
| licq | = 1.3.2_rc | No fix listed |
| licq | = 1.3.4 | No fix listed |
| licq | = 1.3.5 | No fix listed |
References
- SUSE-SR:2008:010 vendor-advisory
- 20080410 Re: licq remote DoS? mailing-list
- 30055 third-party-advisory
- 30236 third-party-advisory
- 3851 third-party-advisory
- www.licq.org
- www.licq.org
- MDVSA-2008:159 vendor-advisory
- [oss-security] 20080425 CVE request: licq denial of service mailing-list
- 20080408 licq remote DoS? exploit mailing-list
- 20080410 Re: Re: licq remote DoS? mailing-list
- 28679 vdb-entry
- ADV-2008-1446 vdb-entry
- licq-connections-dos(41732) vdb-entry
- FEDORA-2008-3812 vendor-advisory