Approved changes feed: RSS · Atom
cpe:2.3:a:cypherpunks:libotr:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Cypherpunks (1119064b-8cad-504b-bd8b-f64d481adc1a) |
|---|---|
| Product | Libotr (29959dad-1804-500d-99f4-9546e2f31c61) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libotr |
purl2cpe | 2026-06-01 10:13:10.141512 |
pkg:deb/ubuntu/libotr |
purl2cpe | 2026-06-01 10:13:10.141515 |
pkg:github/decrypto-org/libotr |
purl2cpe | 2026-06-01 10:13:10.141518 |
pkg:github/off-the-record/libotr |
purl2cpe | 2026-06-01 10:13:10.141521 |
pkg:rpm/centos/libotr |
purl2cpe | 2026-06-01 10:13:10.141524 |
pkg:rpm/fedora/libotr |
purl2cpe | 2026-06-01 10:13:10.141526 |
pkg:rpm/opensuse/libotr |
purl2cpe | 2026-06-01 10:13:10.141529 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-2851 |
vulnerable | 2026-06-08 05:07:43.472078 |
Details available
Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via a series of large OTR messages, which triggers a heap-based buffer overflow.
Published: 2016-04-07T23:00:00.000Z
Updated: 2024-08-05T23:32:21.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3461 |
vulnerable | 2026-06-08 05:02:10.000804 |
Details available
The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a denial of service (application crash) via a message with the value "?OTR:===.", which triggers a heap-based buffer overflow.
Published: 2012-08-20T19:00:00.000Z
Updated: 2024-08-06T20:05:12.525Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.