{"id":"CVE-2008-2954","aliases":["EUVD-2008-2944","GHSA-7hcc-qmpc-f7xq"],"status":"published","title":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a...","description":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.","severity":{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03656,"percentile":0.89698,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2008-07-01T22:00:00Z","modified":"2026-06-16T22:54:48Z","products":[{"vendor":"linux","product":"direct_connect"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43566","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/NmdcHub.cpp.diff?r1=1.14\u0026r2=1.15\u0026sortby=date","tags":["x_refsource_CONFIRM","x_transferred","Exploit"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00116.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/Changelog.txt","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://dcplusplus.svn.sourceforge.net/viewvc/dcplusplus/dcplusplus/trunk/changelog.txt?r1=1027\u0026r2=1026\u0026pathrev=1027","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securitytracker.com/id?1020410","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/30037","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://secunia.com/advisories/30907","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/30918","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00101.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred"]},{"url":"http://www.securitytracker.com/id?1020409","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-2954"},{"url":"https://github.com/advisories/GHSA-7hcc-qmpc-f7xq"}],"sources":{"cve":[{"id":"CVE-2008-2954","description":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.","status":"published","published":"2008-07-01T22:00:00Z","modified":"2024-08-07T09:21:34.565Z","updated_at":"2026-11-02T14:34:44.675398Z"}],"euvd":[{"id":"EUVD-2008-2944","description":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.","status":"published","published":"2008-07-01T22:00:00Z","modified":"2024-08-07T09:21:34Z","updated_at":"2026-11-03T01:38:54.669867Z"}],"ghsa":[{"id":"GHSA-7hcc-qmpc-f7xq","title":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a...","description":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.","status":"published","published":"2022-05-01T23:55:07Z","modified":"2023-01-31T05:05:57Z","cwes":["CWE-20"],"updated_at":"2026-11-02T14:48:56.705904Z"}],"nvd":[{"id":"CVE-2008-2954","description":"client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.","status":"published","published":"2008-07-01T22:41:00Z","modified":"2026-06-16T22:54:48.983Z","cvss":[{"version":"2.0","score":7.8,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:01:27.025121Z"}]}}