CVE-2008-1996
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
95.2%
licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| licq | licq | 0.61 | cpe:2.3:a:licq:licq:0.61:*:*:*:*:*:*:* |
| licq | licq | 0.71 | cpe:2.3:a:licq:licq:0.71:*:*:*:*:*:*:* |
| licq | licq | 0.75 | cpe:2.3:a:licq:licq:0.75:*:*:*:*:*:*:* |
| licq | licq | 0.75.1 | cpe:2.3:a:licq:licq:0.75.1:*:*:*:*:*:*:* |
| licq | licq | 0.75.2 | cpe:2.3:a:licq:licq:0.75.2:*:*:*:*:*:*:* |
| licq | licq | 0.75.3 | cpe:2.3:a:licq:licq:0.75.3:*:*:*:*:*:*:* |
| licq | licq | 0.75.3a | cpe:2.3:a:licq:licq:0.75.3a:*:*:*:*:*:*:* |
| licq | licq | 0.75_991219 | cpe:2.3:a:licq:licq:0.75_991219:*:*:*:*:*:*:* |
| licq | licq | 0.76 | cpe:2.3:a:licq:licq:0.76:*:*:*:*:*:*:* |
| licq | licq | 0.80 | cpe:2.3:a:licq:licq:0.80:*:*:*:*:*:*:* |
References
lists.opensuse.org/opensuse-security-announce/2008-04/msg00011.html
seclists.org/bugtraq/2008/Apr/0100.html
secunia.com/advisories/30055
secunia.com/advisories/30236
securityreason.com/securityalert/3851
www.licq.org/changeset/6146
www.licq.org/ticket/1623
www.mandriva.com/security/advisories?name=MDVSA-2008:159
www.openwall.com/lists/oss-security/2008/04/25/1
www.securityfocus.com/archive/1/490563
www.securityfocus.com/archive/1/490717
www.securityfocus.com/bid/28679
www.vupen.com/english/advisories/2008/1446/references
exchange.xforce.ibmcloud.com/vulnerabilities/41732
www.redhat.com/archives/fedora-package-announce/2008-May/msg00186.html
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
Confidence
High
EPSS
Percentile
95.2%