CVE-2016-4478

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.27%

Published

Jun 13, 2016

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the xmlrpc_char_encode function in modules/transport/xmlrpc/xmlrpclib.c in Atheme before 7.2.7 allows remote attackers to cause a denial of service via vectors related to XMLRPC response encoding.

Weaknesses (CWE)

CWE-119

Affected Products (4)

opensuse · leapvulnerable

opensuse · opensusevulnerable

atheme · athemevulnerable

debian · debian_linuxvulnerable

References (10)

http://lists.opensuse.org/opensuse-updates/2016-05/msg00061.html

http://www.debian.org/security/2016/dsa-3586

http://www.openwall.com/lists/oss-security/2016/05/02/2

http://www.openwall.com/lists/oss-security/2016/05/03/1

https://github.com/atheme/atheme/commit/87580d767868360d2fed503980129504da84b63e

http://lists.opensuse.org/opensuse-updates/2016-05/msg00061.html

http://www.debian.org/security/2016/dsa-3586

http://www.openwall.com/lists/oss-security/2016/05/02/2

http://www.openwall.com/lists/oss-security/2016/05/03/1

https://github.com/atheme/atheme/commit/87580d767868360d2fed503980129504da84b63e

KEV Catalog EPSS Scores Vendors All CVEs