duckcorp records
4 published records for vendor duckcorp.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-310 Cryptographic Issues2
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
27Monitor | CVE-2012-0806No exploit | Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of duckcorp · bip · CWE-119 | Medium6.5 | — | 3.2% | Jan 26, 2012 |
21Monitor | CVE-2010-3071No exploit | bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.duckcorp · bip | Medium5.0 | — | 3.0% | Oct 14, 2010 |
21Monitor | CVE-2013-4550No exploit | Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated withfedoraproject · fedora · CWE-310 | Medium5.1 | — | 2.2% | Dec 24, 2013 |
17Monitor | CVE-2011-5268No exploit | connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptoduckcorp · bip · CWE-310 | Medium4.3 | — | 1.5% | Dec 24, 2013 |
- CVE-2012-080627Monitor
Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of
MediumCVSS 6.5No exploitEPSS 3%duckcorp · bipJan 26, 2012
- CVE-2010-307121Monitor
bip before 0.8.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an empty USER command.
MediumCVSS 5.0No exploitEPSS 3%duckcorp · bipOct 14, 2010
- CVE-2013-455021Monitor
Bip before 0.8.9, when running as a daemon, writes SSL handshake errors to an unexpected file descriptor that was previously associated with
MediumCVSS 5.1No exploitEPSS 2%fedoraproject · fedoraDec 24, 2013
- CVE-2011-526817Monitor
connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descripto
MediumCVSS 4.3No exploitEPSS 1%duckcorp · bipDec 24, 2013