CVE-2016-2851
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Affected Platforms (CPE)
💻
Debian
Debian Linux
= 7.0💻
Debian
Debian Linux
= 8.0💻
Opensuse
Leap
= 42.1💻
Opensuse
Opensuse
= 13.2📦
Cypherpunks