Silc is a narrowly focused secure communication platform centered on its server, client, and toolkit components for instant messaging and conferencing. The vendor's disclosures concentrate on memory-safety and pointer-handling weaknesses, such as buffer-boundary violations and NULL-pointer dereferences, characteristic of native-code implementations in this domain, and frequently acquire public exploit code. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Silc over time
Signals from CVEs in this vendor scope (7 CVEs).
7 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-1327HIGH The SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a reques | Mar 7, 2007 | 7.8 | 33 | NO | YES |
CVE-2008-1227HIGH Stack-based buffer overflow in the silc_fingerprint function in lib/silcutil/silcutil.c in Secure Internet Live Conferencing (SILC) Toolkit 1.1.5, and unspecified earlier versions, | Mar 10, 2008 | 7.5 | 26 | NO | NO |
CVE-2008-1552MEDIUM The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server be | Mar 31, 2008 | 6.8 | 21 | NO | NO |
CVE-2008-1429HIGH Secure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote attackers to cause a denial of service (daemon crash) via a NEW_CLIENT packet without a nickname. | Mar 20, 2008 | 7.8 | 21 | NO | NO |
CVE-2003-1439MEDIUM Secure Internet Live Conferencing (SILC) 0.9.11 and 0.9.12 stores passwords and sessions in plaintext in memory, which could allow local users to obtain sensitive information. | Dec 31, 2003 | 4.3 | 18 | NO | NO |
CVE-2007-3728MEDIUM Buffer overflow in lib/silcclient/client_notify.c of SILC Client and SILC Toolkit before 1.1.2 allows remote attackers to cause a denial of service via "NICK_CHANGE" notifications. | Jul 12, 2007 | 5.0 | 17 | NO | NO |
silc daemon (silcd.c) in Secure Internet Live Conferencing (SILC) 1.0 and earlier allows local users to overwrite arbitrary files via a symlink attack on the silcd.[PID].stats temp | Sep 7, 2005 | 2.1 | 11 | NO | NO |
Signals from CVEs in this vendor scope (7 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Silc.
Media articles that mention a CVE ID that affects a product developed by Silc — matched by CVE ID, not by vendor name.