| Package | Affected versions | Patched versions |
|---|---|---|
| mtr | = 0.21= 0.22= 0.23= 0.24= 0.25= 0.26= 0.27= 0.28= 0.29= 0.30= 0.31= 0.32= 0.33= 0.34= 0.35= 0.36= 0.37= 0.38= 0.39= 0.40= 0.41= 0.42= 0.43= 0.44= 0.45= 0.46= 0.47= 0.48= 0.49= 0.50= 0.51= 0.52= 0.53= 0.54= 0.55= 0.56= 0.57= 0.58= 0.59= 0.60= 0.61= 0.62= 0.63= 0.64= 0.65= 0.66= 0.67= 0.68= 0.69= 0.70= 0.71≤ 0.72 |
Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free