CVE-2011-5268: Duckcorp Bip

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

connection.c in Bip before 0.8.9 does not properly close sockets, which allows remote attackers to cause a denial of service (file descriptor consumption and crash) via multiple failed SSL handshakes, a different vulnerability than CVE-2013-4550. NOTE: this issue was SPLIT from CVE-2013-4550 because it is a different type of issue.

Affected products

• Duckcorp Bip: up to and including 0.8.8; version 0.8.0 only; version 0.8.1 only; version 0.8.2 only; version 0.8.3 only; version 0.8.4 only; …
• Fedoraproject Fedora: version 18 only; version 19 only; version 20 only

Published 2013-12-24. Last modified 2026-06-16.