CVE-2016-4478
HighSummary
Buffer overflow in the xmlrpc_char_encode function in Atheme before version 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.
Risk Assessment
Attackers can exploit this vulnerability to disrupt service operation, potentially leading to system downtime.
Recommendation
It is recommended to upgrade Atheme to version 7.2.7 or later to mitigate this vulnerability.
Other vulnerabilities in Atheme
See all- CVE-2017-6384High
A memory leak in the login_user function in saslserv/main.c in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This issue is fixed in version 7.2.8.
- CVE-2014-9773High
Atheme before version 7.2.7 has a vulnerability that allows remote attackers to modify Anope FLAGS behavior by registering and dropping nicknames using the (1) LIST, (2) CLEAR, or (3) MODIFY keywords.
Original NVD description (English source)
Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.