Unrated severityNVD Advisory· Published Jul 1, 2008· Updated Jun 16, 2026
CVE-2008-2954
CVE-2008-2954
Description
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:a:linux:direct_connect:0.686:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:linux:direct_connect:0.686:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.699:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.700:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.701:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.702:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.703:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.704:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.705:*:*:*:*:*:*:*
- cpe:2.3:a:linux:direct_connect:0.706:*:*:*:*:*:*:*
- Range: <0.707
Patches
Vulnerability mechanics
References
11- cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diffnvdExploit
- cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/Changelog.txtnvd
- dcplusplus.svn.sourceforge.net/viewvc/dcplusplus/dcplusplus/trunk/changelog.txtnvd
- secunia.com/advisories/30907nvd
- secunia.com/advisories/30918nvd
- www.securityfocus.com/bid/30037nvd
- www.securitytracker.com/idnvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/43566nvd
- www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.htmlnvd
News mentions
0No linked articles in our index yet.