CVE-2007-5029: Dibbler

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a buffer over-read and cause a denial of service (daemon crash), as demonstrated by incorrect behavior of the TSrvMsg constructor in SrvMessages/SrvMsg.cpp when (1) reading the option code and option length and (2) parsing options.

Affected products

• Dibbler Dibbler: version 0.6.0 only

Published 2007-09-21. Last modified 2026-06-16.