Severity by source
Network-reachable proxy raises AV:N; AC:H because exploiting integer truncation to controlled memory corruption requires precise conditions; impact weighted toward availability with partial confidentiality/integrity.
Lifecycle Timeline
1DescriptionCVE.org
[GHSA-4g8q-rgxf-fmgf: EchoLink proxy: integer truncation in message length]
AnalysisAI
Integer truncation of a message length field in the EchoLink proxy component may allow an attacker to trigger memory-safety issues by supplying a crafted message whose length, when truncated to a narrower integer type, produces an incorrect boundary calculation. The affected software is EchoLink, a VoIP system used by amateur radio operators to relay audio over the internet via proxy nodes. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No CVSS vector was provided, so authentication requirements cannot be confirmed from available data. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk assessment is significantly constrained by the absence of CVSS score, vector, CWE, EPSS score, KEV status, and patch version data - all critical signals are missing. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with network access to an exposed EchoLink proxy port sends a specially crafted protocol message with a length value whose upper bits, when truncated by the proxy's integer handling, yield a value smaller than the actual data payload. The proxy allocates an undersized buffer and copies the full payload into it, potentially overwriting adjacent memory. … |
| Remediation | No exact fix version was provided in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today