CVE-2006-4005: Bomberclone

Medium severity, CVSS 5.0. EPSS: 3.7% chance of exploitation in the next 30 days.

BomberClone 0.11.6 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) a certain malformed PKGF_ackreq packet, which triggers a crash in the rscache_add() function in pkgcache.c; and (2) an error packet, which is intended to be received by clients and force client shutdown, but also triggers server shutdown.

Affected products

• Bomberclone Bomberclone: version 0.11.3 only; version 0.11.4 only; version 0.11.5 only; version 0.11.6 only

Published 2006-08-07. Last modified 2026-06-16.