CVE-2024-25004

Katalog CVE

CVSS 7.8 · High EPSS 1,8%

Kerentanan Out-of-bounds Write pada 9bis kitty. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and input sanitization (at line 2600). This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution.

Rincian

Terbit di NVD

9 Februari 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,8% peluang dieksploitasi; lebih tinggi dari 77,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://packetstormsecurity.com/files/177032/KiTTY-0.76.1.13-Buffer-Overflows.html advisory pihak ketiga · vdb entry
• https://blog.defcesco.io/CVE-2024-25003-CVE-2024-25004 exploit · advisory pihak ketiga
• http://seclists.org/fulldisclosure/2024/Feb/13 exploit · mailing list
• http://seclists.org/fulldisclosure/2024/Feb/14 exploit · mailing list
• http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html