Vulnerabilities (CVE)

Filtered by vendor Atheme Subscribe
Filtered by product Atheme
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-6384 1 Atheme 1 Atheme 2019-10-03 7.8 HIGH 7.5 HIGH
Memory leak in the login_user function in saslserv/main.c in saslserv/main.so in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This is fixed in 7.2.8.
CVE-2014-9773 2 Atheme, Opensuse 3 Atheme, Leap, Opensuse 2018-10-30 5.0 MEDIUM 7.5 HIGH
modules/chanserv/flags.c in Atheme before 7.2.7 allows remote attackers to modify the Anope FLAGS behavior by registering and dropping the (1) LIST, (2) CLEAR, or (3) MODIFY keyword nicks.
CVE-2016-4478 3 Atheme, Debian, Opensuse 4 Atheme, Debian Linux, Leap and 1 more 2018-10-30 5.0 MEDIUM 7.5 HIGH
Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.