The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mtr | Jul 30, 2024 | May 21, 2008 |
| Gentoo Linux | — | Upgrade net-analyzer/mtr. | Oct 30, 2017 | May 21, 2008 |
| Suse | — | Upgrade mtr-gtkUpgrade mtrUpgrade suse-release | Feb 17, 2015 | May 21, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub