Buffer overflow in Universityofcalifornia Boinc_client

CVE-2011-5280

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Vulnerability class: Buffer Overflow

EPSS: 0.027 (84.3th percentile) — read the EPSS interpretation.

Affected products

Universityofcalifornia Boinc_client — versions 6.13.0, 6.13.1
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (mailing-list, x_refsource_MLIST)
cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (x_refsource_CONFIRM)