CVE-2012-0806: Duckcorp Bip

Medium severity, CVSS 6.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descriptors.

Affected products

• Duckcorp Bip: up to and including 0.8.8; version 0.7.0 only; version 0.7.1 only; version 0.7.2 only; version 0.7.3 only; version 0.7.4 only; …

Published 2012-01-27. Last modified 2026-06-16.