DEBIAN-CVE-2021-44847

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2021-44847
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-44847.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2021-44847
Upstream
Published
2021-12-13T01:15:07.730Z
Modified
2025-11-19T01:04:37.219215Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

A stack-based buffer overflow in handle_request function in DHT.c in toxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by an improper length calculation during the handling of received network packets) allows remote attackers to crash the process or potentially execute arbitrary code via a network packet.

References

Affected packages

Debian:11 / libtoxcore

Package

Name
libtoxcore
Purl
pkg:deb/debian/libtoxcore?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

0.*
0.2.12-1
0.2.13-1
0.2.18-1
0.2.19-1
0.2.20-1
0.2.22-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-44847.json"

Debian:12 / libtoxcore

Package

Name
libtoxcore
Purl
pkg:deb/debian/libtoxcore?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.13-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-44847.json"

Debian:13 / libtoxcore

Package

Name
libtoxcore
Purl
pkg:deb/debian/libtoxcore?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.13-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-44847.json"

Debian:14 / libtoxcore

Package

Name
libtoxcore
Purl
pkg:deb/debian/libtoxcore?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.2.13-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Database specific

source 
"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2021-44847.json"