CVE-2011-5280

Publication date 2 June 2014

Last updated 24 July 2024

Multiple stack-based buffer overflows in BOINC 6.13.x allow remote attackers to cause a denial of service (crash) via a long trickle-up to (1) client/cs_trickle.cpp or (2) db/db_base.cpp.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
boinc	14.04 LTS trusty	Not in release
	13.10 saucy	Not affected
	12.04 LTS precise	Not affected
	10.04 LTS lucid	Ignored end of life

How can I get the fixes?
What do statuses mean?

Notes

jdstrand

per upstream, only 6.x affected

References

MITRE
NVD
Launchpad
Debian

Other references

http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git;a=commitdiff;h=ae04b50a71f3e96ee1bc59b76fca97cf0fe976f7
http://boinc.berkeley.edu/gitweb/?p=boinc-v2.git;a=commitdiff;h=5b04b249db166ec38c1ee99a9eadcaa300c0f454
http://www.openwall.com/lists/oss-security/2013/04/28/3
https://www.cve.org/CVERecord?id=CVE-2011-5280