Integer Overflow or Wraparound The advisory has been revoked - it doesn't affect any version of package net6 (opens in a new tab)

Threat Intelligence

0.42% (75^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU1210-NET6-650379
published10 Sept 2020
disclosed10 Feb 2014

Report a new vulnerability Found a mistake?

Introduced: 10 Feb 2014

CVE-2011-4093 (opens in a new tab) CWE-190 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:12.10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream net6 package and not the net6 package as distributed by Ubuntu.

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.