CyberSec.Space Logo
Back to CVE Browser

CVE-2016-20047

HIGH
8.4
CVSS Severity Score
EPSS Score0.1990%
EPSS Percentile38.93th
PublishedMar 28, 2026
Last ModifiedMar 30, 2026

Vulnerability Description

EKG Gadu 1.9~pre+r2855-3+b1 contains a local buffer overflow vulnerability in the username handling that allows local attackers to execute arbitrary code by supplying an oversized username string. Attackers can trigger the overflow in the strlcpy function by passing a crafted buffer exceeding 258 bytes to overwrite the instruction pointer and execute shellcode with user privileges.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 http://ekg.chmurka.net/
🔗 https://www.exploit-db.com/exploits/40392
🔗 https://www.vulncheck.com/advisories/ekg-gadu-local-buffer-overflow-via-username-parameter

Related Vulnerabilities

CVE-2016-802710.0

SQL injection vulnerability in core services in Intel Security McAfee ePolicy Orchestrator (ePO) 5.3.2 and earlier and 5.1.3 and e...

CVE-2016-089810.0

MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were logged to t...

CVE-2016-745710.0

VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain privileges, or halt and remove v...

CVE-2016-933510.0

A hard-coded cryptographic key vulnerability was identified in Red Lion Controls Sixnet-Managed Industrial Switches running firmwa...