Buffer overflow in Wojtek Kaniewsk Libgadu

CVE-2008-4776

libgadu before 1.8.2 allows remote servers to cause a denial of service (crash) via a contact description with a large length, which triggers a buffer over-read.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (66.7th percentile) — read the EPSS interpretation.

Affected products

Wojtek_kaniewsk Libgadu — versions 1.7.0, 1.7.1, 1.7.2
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

secalert@redhat.com (mailing-list, x_refsource_MLIST)
secalert@redhat.com (vendor-advisory, x_refsource_DEBIAN)
secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)
secalert@redhat.com (vdb-entry, x_refsource_BID)
secalert@redhat.com (vdb-entry, x_refsource_XF)
secalert@redhat.com (x_refsource_CONFIRM)