CVE Feed

    Dashboard / CVE / CVE-2008-1552

    CVE-2008-1552

    The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.

    Published:Mar 20, 2008
    Last Modified:Apr 23, 2026
    EPS:Mar 31, 2008
    EPSS Score:0.0673
    CVSS Score:6.8

    Affected Products

    Vendor
    Redhat
    Product
    Fedora
    Vendor
    Silc
    Product
    Silc
    Vendor
    Silc
    Product
    Silc Client
    Vendor
    Silc
    Product
    Silc Server
    Vendor
    Silc
    Product
    Silc Toolkit

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2018-19139 (CVSS 5.5) — An issue has been found in JasPer 2.0.14. There is a memory leak in jas_malloc.c when called from jpc_unk_getp…
    CVE-2014-9278 (CVSS 4) — The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environmen…
    CVE-2011-1011 (CVSS 6.9) — The seunshare_mount function in sandbox/seunshare.c in seunshare in certain Red Hat packages of policycoreutil…
    CVE-2011-0008 (CVSS 6.9) — A certain Fedora patch for parse.c in sudo before 1.7.4p5-1.fc14 on Fedora 14 does not properly interpret a sy…
    CVE-2009-3080 (CVSS 7.2) — Array index error in the gdth_read_event function in drivers/scsi/gdth.c in the Linux kernel before 2.6.32-rc8…
    CVE-2010-4695 (CVSS 5) — A certain Fedora patch for gif2png.c in gif2png 2.5.1 and 2.5.2, as distributed in gif2png-2.5.1-1200.fc12 on …
    CVE-2009-1573 (CVSS 4.6) — xvfb-run 1.6.1 in Debian GNU/Linux, Ubuntu, Fedora 10, and possibly other operating systems place the magic co…
    CVE-2008-6755 (CVSS 5) — ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the per…
    CVE-2008-6560 (CVSS 7.8) — Buffer overflow in CMAN - The Cluster Manager before 2.03.09-1 on Fedora 9 and Red Hat Enterprise Linux (RHEL)…
    CVE-2009-0180 (CVSS 7.5) — Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 1…

    References

    http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
    http://secunia.com/advisories/29463
    http://secunia.com/advisories/29465
    http://secunia.com/advisories/29622
    http://secunia.com/advisories/29946
    http://security.gentoo.org/glsa/glsa-200804-27.xml
    http://securityreason.com/securityalert/3795
    http://silcnet.org/general/news/?item=client_20080320_1
    http://silcnet.org/general/news/?item=server_20080320_1
    http://silcnet.org/general/news/?item=toolkit_20080320_1
    http://www.coresecurity.com/?action=item&id=2206
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:158
    http://www.securityfocus.com/archive/1/490069/100/0/threaded
    http://www.securityfocus.com/bid/28373
    http://www.securitytracker.com/id?1019690
    http://www.vupen.com/english/advisories/2008/0974/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41474
    https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00513.html
    https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00538.html
    http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00005.html
    http://secunia.com/advisories/29463
    http://secunia.com/advisories/29465
    http://secunia.com/advisories/29622
    http://secunia.com/advisories/29946
    http://security.gentoo.org/glsa/glsa-200804-27.xml
    http://securityreason.com/securityalert/3795
    http://silcnet.org/general/news/?item=client_20080320_1
    http://silcnet.org/general/news/?item=server_20080320_1
    http://silcnet.org/general/news/?item=toolkit_20080320_1
    http://www.coresecurity.com/?action=item&id=2206
    http://www.mandriva.com/security/advisories?name=MDVSA-2008:158
    http://www.securityfocus.com/archive/1/490069/100/0/threaded
    http://www.securityfocus.com/bid/28373
    http://www.securitytracker.com/id?1019690
    http://www.vupen.com/english/advisories/2008/0974/references
    https://exchange.xforce.ibmcloud.com/vulnerabilities/41474
    https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00513.html
    https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00538.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High