Vulnerabilities (CVE)

Filtered by vendor Cypherpunks Subscribe
Filtered by product Libotr
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-2851 3 Cypherpunks, Debian, Opensuse 4 Libotr, Debian Linux, Leap and 1 more 2018-10-30 7.5 HIGH 9.8 CRITICAL
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.