CVE-2006-3251 Memory corruption in n/a

High 7.5 Published 27 Jun 2006 Updated 7 Aug 2024

Attackers can execute arbitrary code via crafted entries exploiting a heap-based buffer overflow in the Hashcash library.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: Available

What is CVE-2006-3251?

CVE-2006-3251 is a high-severity memory corruption vulnerability in n/a, published on 27 Jun 2006.

Official description

Heap-based buffer overflow in the array_push function in hashcash.c for Hashcash before 1.21 might allow attackers to execute arbitrary code via crafted entries.

Weakness: CWE-119

Which versions are affected by CVE-2006-3251?

It affects 1 product.

Products include Hashcash Hashcash.

How do I fix CVE-2006-3251?

Upgrade to a fixed version.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2006-3251 being exploited?

There is no known exploitation of CVE-2006-3251 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2006-3251, DSA-1114, GHSA-f7fm-rw62-26cq.