CVE-2008-6393
NoneCVSS
—
EPSS
18.2%
Published
Mar 3, 2009
CISA due date
—
The record
PSI Jabber client before 0.12.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a file transfer request with a negative value in a SOCKS5 option, which bypasses a signed integer check and triggers an integer overflow and a heap-based buffer overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | psi | 0 | 0.12.1-1 |
| Debian:11 | psi | 0 | 0.12.1-1 |
| Debian:12 | psi | 0 | 0.12.1-1 |
| Debian:13 | psi | 0 | 0.12.1-1 |
| Debian:5.0 | psi | 0 | 0.11-9 |
Related vulnerabilities
- CVE-2026-102621 A vulnerability was identified in Freedesktop Poppler up to 26.08.0. CWE-189
- CVE-2026-102620 A vulnerability was determined in Freedesktop Poppler 26.06.0/26.07.0/26.08.0. CWE-189
- CVE-2026-93314 A vulnerability was determined in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93313 A vulnerability was found in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-93311 A vulnerability was detected in Freedesktop Poppler 26.07.0. CWE-189
- CVE-2026-86297 A vulnerability was identified in D-Link DIR-605 B1v202WWB03. CWE-189
- CVE-2026-86289 A vulnerability was found in Ollama up to 0.31.1. CWE-189
- CVE-2026-82908 A vulnerability was found in MSI Dragon Center up to 2.0.155.0. CWE-189