CVE-2008-1552 - CVE House
Back to Database
Status published Medium CVE-2008-1552

The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure...

Vulnerability Description

The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1552

Credits & Attribution

No credits recorded in the NVD database.

References

More from silc

View All →
CVE-2008-1429
Secure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote...
High 7.8
CVE-2008-1227
Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in...
High 7.5
CVE-2007-3728
Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit...
Medium 5
CVE-2007-1327
The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote...
High 7.8
CVE-2005-2809
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0...
Low 2.1

Affected Vendor

Affected Software

silc client, silc server, silc toolkit, silc
Vulnerable Versions:
0

Timeline

Official Publish: March 31st, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.