CVE:CVE-2016-4478
CNNVD:CNNVD-201605-097
Atheme是一个可移植的、安全的、开源和模块化的IRC服务集。
Atheme 7.2.7之前版本的modules/transport/xmlrpc/xmlrpclib.c文件中的‘xmlrpc_char_encode’函数存在缓冲区溢出漏洞。远程攻击者可利用该漏洞造成拒绝服务。
solution:Upgrade opensuse leap to a higher version than 42.1,and avoid the version 42.1; Upgrade opensuse opensuse to a higher version than 13.2,and avoid the version 13.2; Upgrade atheme atheme to a higher version than 7.2.6,and avoid the version (,7.2.6]; Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0