PatchTheCVEcypherpunks vulnerabilities
Recent CVEs affecting cypherpunks products. 3 tracked.
cypherpunks has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2016-04-12. Highest priority: CVE-2016-2851 (score 74/100).
- CVE-2016-2851 CRITICAL 9.8 MITIGATE MITIGATE Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a deni
- CVE-2015-8833 CRITICAL 9.8 UPGRADE Use-after-free vulnerability in the create_smp_dialog function in gtk-dialog.c in the Off-the-Record Messaging
- CVE-2012-3461 MEDIUM 4.3 UPGRADE The (1) otrl_base64_otr_decode function in src/b64.c; (2) otrl_proto_data_read_flags and (3) otrl_proto_accept
FAQ
How do I fix cypherpunks vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cypherpunks being exploited right now?
None of the tracked cypherpunks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cypherpunks CVE should I patch first?
CVE-2016-2851 currently ranks highest (74/100): Integer overflow in proto.c in libotr before 4.1.1 on 64-bit platforms allows remote attackers to cause a deni.