CVE-2016-2851
- State
- Published
- Severity
- Not scored
- Published
- Apr 7, 2016
- Updated
- Aug 5, 2024
- Reserved
- Mar 6, 2016
Description
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- USN-2926-1vendor-advisory
- 20160309 Advisory X41-2016-001: Memory Corruption Vulnerability in "libotr"mailing-list
- DSA-3512vendor-advisory
- GLSA-201701-10vendor-advisory
- 39550exploit
- 84285vdb-entry
- 20160309 Advisory X41-2016-001: Memory Corruption Vulnerability in "libotr"mailing-list
- https://www.x41-dsec.de/lab/advisories/x41-2016-001-libotr/
- openSUSE-SU-2016:0708vendor-advisory
- [OTR-users] 20160309 Security Advisory: upgrade to libotr 4.1.1mailing-list
- openSUSE-SU-2016:0732vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.