Multiple buffer overflows in readline.c in Echoping 6.0.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted reply in the (1) TLSreadline or (2) SSLreadline function, related to the EchoPingHttps Smokeping probe.