Описание
The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference.
Ссылки
- ExploitVendor Advisory
- Exploit
- Patch
- ExploitPatch
- ExploitVendor Advisory
- Exploit
- Patch
- ExploitPatch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:dconnect:dconnect_daemon:0.0.2:*:*:*:*:*:*:*
cpe:2.3:a:dconnect:dconnect_daemon:0.0.3:*:*:*:*:*:*:*
cpe:2.3:a:dconnect:dconnect_daemon:0.7.0:*:*:*:*:*:*:*
EPSS
Процентиль: 95%
0.15602
Средний
5 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
почти 4 года назад
The dc_chat function in cmd.dc.c in DConnect Daemon 0.7.0 and earlier allows remote attackers to cause a denial of service (application crash) by sending a client message before providing the nickname, which triggers a null pointer dereference.
EPSS
Процентиль: 95%
0.15602
Средний
5 Medium
CVSS2
Дефекты
NVD-CWE-Other