| Package | Affected versions | Patched versions |
|---|---|---|
| mtr | = 0.55= 0.56= 0.57= 0.58= 0.59= 0.60= 0.61= 0.62= 0.63= 0.64= 0.65 |
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free