Published: 28/04/2008 Updated: 08/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

licq prior to 1.3.6 allows remote malicious users to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections.

Vulnerable Product	Search on Vulmon	Subscribe to Product
licq licq 0.61
licq licq 0.71
licq licq 0.76
licq licq 0.80
licq licq 1.0.2
licq licq 1.0.3
licq licq 1.0.4
licq licq 1.3.0_pre
licq licq 1.3.2
licq licq 0.75.3a
licq licq 0.75_991219
licq licq 1.0
licq licq 1.0.1
licq licq 1.2.7
licq licq 1.3.0
licq licq 0.75
licq licq 0.75.1
licq licq 0.81
licq licq 0.84a
licq licq 1.2
licq licq 1.2.3
licq licq 1.3.2_rc
licq licq 1.3.4
licq licq 0.75.2
licq licq 0.75.3
licq licq 0.84b
licq licq 0.85
licq licq 1.2.4
licq licq 1.2.6
licq licq 1.3.5

Debian Bug report logs - #479036 CVE-2008-1996: DoS due to too many connections Package: licq; Maintainer for licq is Erik Johansson <debian@ejohanssonse>; Source for licq is src:licq (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> Date: Fri, 2 May 2008 11:57:02 UTC Severity: norma ...

source: wwwsecurityfocuscom/bid/28679/info LICQ is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions A remote attacker can exploit this issue to crash the affected application, denying service to legitimate users The attacker may also be able to execute code, but this has n ...

CWE-399 http://www.securityfocus.com/archive/1/490563 http://www.securityfocus.com/archive/1/490717 http://seclists.org/bugtraq/2008/Apr/0100.html http://www.openwall.com/lists/oss-security/2008/04/25/1 http://www.licq.org/changeset/6146 http://www.licq.org/ticket/1623 http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html http://www.securityfocus.com/bid/28679 https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00186.html http://secunia.com/advisories/30055 http://secunia.com/advisories/30236 http://www.mandriva.com/security/advisories?name=MDVSA-2008:159 http://securityreason.com/securityalert/3851 http://www.vupen.com/english/advisories/2008/1446/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41732 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=479036 https://nvd.nist.gov https://www.exploit-db.com/exploits/31627/

CVE-2008-1996

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect