All packages
Atheme vulnerabilities
3 known CVE vulnerabilities in Atheme, translated and rated.
- CVE-2017-6384High
A memory leak in the login_user function in saslserv/main.c in Atheme 7.2.7 allows a remote unauthenticated attacker to consume memory and cause a denial of service. This issue is fixed in version 7.2.8.
- CVE-2016-4478High
Buffer overflow in the xmlrpc_char_encode function in Atheme before version 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.
- CVE-2014-9773High
Atheme before version 7.2.7 has a vulnerability that allows remote attackers to modify Anope FLAGS behavior by registering and dropping nicknames using the (1) LIST, (2) CLEAR, or (3) MODIFY keywords.