CVE-2008-2954

CVE-2008-2954 describes a denial-of-service vulnerability in Linux DC++ (linuxdcpp) versions prior to 0.707, where an out-of-bounds read can be triggered by a remote attacker sending an empty private message. This vulnerability carries a high CVSS score of 7.8, indicating a critical impact (A:C) with low attack complexity (AC:L) and no authentication required (Au:N), making it easily exploitable over the network (AV:N). Despite its severity, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting it is not a widely targeted threat.