barnowl records
3 published records for vendor barnowl.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-20 Improper Input Validation1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2010-0793No exploit | Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code viabarnowl · barnowl · CWE-119 | High7.5 | — | 3.8% | Mar 16, 2010 |
31Monitor | CVE-2009-0363No exploit | Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involvbarnowl · barnowl · CWE-119 | High7.5 | — | 3.3% | Feb 17, 2009 |
31Monitor | CVE-2010-2725No exploit | BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allowsbarnowl · barnowl · CWE-20 | High7.5 | — | 2.9% | Aug 5, 2010 |
- CVE-2010-079331Monitor
Buffer overflow in BarnOwl before 1.5.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via
HighCVSS 7.5No exploitEPSS 3%barnowl · barnowlMar 16, 2010
- CVE-2009-036331Monitor
Multiple buffer overflows in (a) BarnOwl before 1.0.5 and (b) owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involv
HighCVSS 7.5No exploitEPSS 3%barnowl · barnowlFeb 17, 2009
- CVE-2010-272531Monitor
BarnOwl before 1.6.2 does not check the return code of calls to the (1) ZPending and (2) ZReceiveNotice functions in libzephyr, which allows
HighCVSS 7.5No exploitEPSS 2%barnowl · barnowlAug 5, 2010