{
  "cveId": "CVE-2021-44847",
  "url": "https://patchblox.com/security/cve/CVE-2021-44847",
  "summary": "CVE-2021-44847 is fixed in 3 products on 1 platform, first by libtoxcore2 0.2.13-1, released December 12, 2021. It is not reported as exploited. Patch Radar priority: High.",
  "title": "libtoxcore2: A stack-based buffer overflow in handle_request function in DHT.c intoxcore 0.1.9 through 0.1.11 and 0.2.0 through 0....",
  "description": "A stack-based buffer overflow in handle_request function in DHT.c intoxcore 0.1.9 through 0.1.11 and 0.2.0 through 0.2.12 (caused by animproper length calculation during the handling of received networkpackets) allows remote attackers to crash the process or potentiallyexecute arbitrary code via a network packet.",
  "published": "2021-12-12T17:15:00Z",
  "severity": "Medium",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.04135,
  "epssPercentile": 0.90894,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "libtoxcore",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "0.2.13-1",
      "fix": "DEBIAN-CVE-2021-44847",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-44847",
      "released": "2021-12-13T01:15:07Z"
    },
    {
      "platform": "linux",
      "product": "libtoxcore",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "0.2.13-1",
      "fix": "DEBIAN-CVE-2021-44847",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-44847",
      "released": "2021-12-13T01:15:07Z"
    },
    {
      "platform": "linux",
      "product": "libtoxcore",
      "release": "Debian 14",
      "fixedVersion": "0.2.13-1",
      "fix": "DEBIAN-CVE-2021-44847",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2021-44847",
      "released": "2021-12-13T01:15:07Z"
    },
    {
      "platform": "linux",
      "product": "libtoxcore2",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.2.13-1",
      "fix": "libtoxcore2 0.2.13-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-libtoxcore2-0.2.13-1",
      "released": "2021-12-12T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "libtoxcore2",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.2.13-1",
      "fix": "libtoxcore2 0.2.13-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-libtoxcore2-0.2.13-1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "libtoxcore2",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.2.13-1",
      "fix": "libtoxcore2 0.2.13-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-libtoxcore2-0.2.13-1",
      "released": "2026-01-16T01:42:24Z"
    },
    {
      "platform": "linux",
      "product": "toxcore-utils",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "0.2.13-1",
      "fix": "toxcore-utils 0.2.13-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-toxcore-utils-0.2.13-1",
      "released": "2021-12-12T17:15:00Z"
    },
    {
      "platform": "linux",
      "product": "toxcore-utils",
      "release": "Ubuntu 24.10 (oracular)",
      "fixedVersion": "0.2.13-1",
      "fix": "toxcore-utils 0.2.13-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-oracular-toxcore-utils-0.2.13-1",
      "released": "2026-01-16T01:42:22Z"
    },
    {
      "platform": "linux",
      "product": "toxcore-utils",
      "release": "Ubuntu 25.04 (plucky)",
      "fixedVersion": "0.2.13-1",
      "fix": "toxcore-utils 0.2.13-1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-plucky-toxcore-utils-0.2.13-1",
      "released": "2026-01-16T01:42:24Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}