CVE-2008-2954: Linux Direct Connect

High severity, CVSS 7.8. EPSS: 3.7% chance of exploitation in the next 30 days.

client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an out-of-bounds read.

Affected products

• Linux Direct Connect: version 0.686 only; version 0.699 only; version 0.700 only; version 0.701 only; version 0.702 only; version 0.703 only; …

Published 2008-07-01. Last modified 2026-06-16.