CVE-2011-5129

UnknownEPSS 7.70%

Last modified

CVE-2011-5129 is a vulnerability of currently unknown severity. Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.. EPSS estimates a 7.70% chance of exploitation in the next 30 days.

Description

Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.

Metrics

EPSS Probability
7.70%

93.8th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
XchatXchat<= 2.8.9
XchatXchat1.2.1
XchatXchat1.3.9
XchatXchat1.3.10
XchatXchat1.3.11
XchatXchat1.3.12
XchatXchat1.3.13
XchatXchat1.4
XchatXchat1.4.1
XchatXchat1.4.2
XchatXchat1.4.3
XchatXchat1.5.6
XchatXchat1.8.0
XchatXchat1.8.1
XchatXchat1.8.2
XchatXchat1.8.3
XchatXchat1.8.4
XchatXchat1.8.5
XchatXchat1.8.6
XchatXchat1.8.7
XchatXchat1.8.8
XchatXchat1.8.9
XchatXchat1.9.0
XchatXchat1.9.1
XchatXchat1.9.2
XchatXchat1.9.3
XchatXchat1.9.4
XchatXchat1.9.5
XchatXchat1.9.6
XchatXchat1.9.7
XchatXchat1.9.8
XchatXchat1.9.9
XchatXchat2.0.0
XchatXchat2.0.1
XchatXchat2.0.2
XchatXchat2.0.3
XchatXchat2.0.4
XchatXchat2.0.5
XchatXchat2.0.6
XchatXchat2.0.7
XchatXchat2.0.8
XchatXchat2.6.7
XchatXchat2.8.0
XchatXchat2.8.1
XchatXchat2.8.3
XchatXchat2.8.4
XchatXchat2.8.5B
XchatXchat2.8.6
XchatXchat2.8.7A
XchatXchat2.8.7b

Showing 50 of 51 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2011-5129?
Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long response string.
How severe is CVE-2011-5129?
Severity scoring for CVE-2011-5129 is pending analysis. The EPSS model estimates a 7.70% probability of exploitation in the next 30 days.
How do I fix CVE-2011-5129?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2011-5129?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST