PatchTheCVEduckcorp vulnerabilities
Recent CVEs affecting duckcorp products. 3 tracked.
duckcorp has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2013-12-24. Highest priority: CVE-2012-0806 (score 45/100).
- CVE-2013-4550 MEDIUM 5.1 MITIGATE UPGRADE Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that
- CVE-2012-0806 MEDIUM 6.5 UPGRADE Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via
- CVE-2011-5268 MEDIUM 4.3 UPGRADE MITIGATE connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a den
FAQ
How do I fix duckcorp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is duckcorp being exploited right now?
None of the tracked duckcorp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which duckcorp CVE should I patch first?
CVE-2012-0806 currently ranks highest (45/100): Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via .