cypherpunks libotr 3.1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:cypherpunks:libotr:3.1.0:*:*:*:*:*:*:*
part: a version: 3.1.0 update: *
| Vendor | Cypherpunks (1119064b-8cad-504b-bd8b-f64d481adc1a) |
|---|---|
| Product | Libotr (29959dad-1804-500d-99f4-9546e2f31c61) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/libotr |
purl2cpe | 2026-06-01 10:13:10.141510 |
pkg:deb/ubuntu/libotr |
purl2cpe | 2026-06-01 10:13:10.141514 |
pkg:github/decrypto-org/libotr |
purl2cpe | 2026-06-01 10:13:10.141516 |
pkg:github/off-the-record/libotr |
purl2cpe | 2026-06-01 10:13:10.141519 |
pkg:rpm/centos/libotr |
purl2cpe | 2026-06-01 10:13:10.141522 |
pkg:rpm/fedora/libotr |
purl2cpe | 2026-06-01 10:13:10.141525 |
pkg:rpm/opensuse/libotr |
purl2cpe | 2026-06-01 10:13:10.141528 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-3461 |
vulnerable | 2026-06-08 05:02:10.001429 |
Details available
The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept_data functions in src/proto.c; and (4) decode function in toolkit/parse.c in libotr before 3.2.1 allocates a zero-length buffer when decoding a base64 string, which allows remote attackers to cause a denial of service (application crash) via a message with the value "?OTR:===.", which triggers a heap-based buffer overflow.
Published: 2012-08-20T19:00:00.000Z
Updated: 2024-08-06T20:05:12.525Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.