CVE-2008-2953: Linux Direct Connect

Medium severity, CVSS 5.0. EPSS: 3.2% chance of exploitation in the next 30 days.

Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference.

Affected products

• Linux Direct Connect: version 0.686 only; version 0.699 only; version 0.700 only; version 0.701 only; version 0.702 only; version 0.703 only; …

Published 2008-07-01. Last modified 2026-06-16.