CVE Vulnerabilities

CVE-2006-4005

Published: Aug 07, 2006 | Modified: Jul 20, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown.

Affected Software

Name Vendor Start Version End Version
Bomberclone Bomberclone 0.11.5 0.11.5
Bomberclone Bomberclone 0.11.6 0.11.6
Bomberclone Bomberclone 0.11.3 0.11.3
Bomberclone Bomberclone 0.11.4 0.11.4

References