Every CVE Search/ Get API key

CVE-2011-5280

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of...

5.0 MediumFix available

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Exploit likelihood

2.73%Up 1.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Record
CVE-2011-5280
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Record
CVE-2011-5280
Updated
2026-11-02
EUVDEUVD-2011-5179 No score

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Record
EUVD-2011-5179
Updated
2026-11-03
GitHub AdvisoriesGHSA-x4mx-r8f8-rwrf No score

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of...

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Record
GHSA-x4mx-r8f8-rwrf
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Record
CVE-2011-5280
Updated
2026-11-02
OSVDEBIAN-CVE-2011-5280 No score

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Record
DEBIAN-CVE-2011-5280
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
boinc
Debian:12
before 7.0.2+dfsg-1
7.0.2+dfsg-1
boinc
Debian:13
before 7.0.2+dfsg-1
7.0.2+dfsg-1
boinc
Debian:14
before 7.0.2+dfsg-1
7.0.2+dfsg-1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-5280 is a medium vulnerability (CVSS 5.0) in Universityofcalifornia Boinc Client, published June 2, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in boinc 7.0.2+dfsg-1.

References

MoveEnter Open