CVE-2024-25003

Katalog CVE

CVSS 7.8 · High EPSS 1,8%

Kerentanan Out-of-bounds Write pada 9bis kitty. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution.

Rincian

Terbit di NVD

9 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 78,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/177032/KiTTY-0.76.1.13-Buffer-Overflows.html advisory pihak ketiga · vdb entry
• http://seclists.org/fulldisclosure/2024/Feb/13 exploit · mailing list · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Feb/14 exploit · mailing list · advisory pihak ketiga
• https://blog.defcesco.io/CVE-2024-25003-CVE-2024-25004 exploit · advisory pihak ketiga
• http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html