The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nut | Jul 30, 2024 | Jun 1, 2012 |
| Freebsd | — | Upgrade nut | Dec 10, 2025 | May 30, 2012 |
| Gentoo Linux | — | Upgrade sys-power/nut. | Oct 30, 2017 | Jun 1, 2012 |
| Suse | — | Upgrade nut-doc-asciidocUpgrade nut-cgiUpgrade libupsclient6Upgrade libnutclientstub1Upgrade nut-doc-htmlUpgrade nutUpgrade libnutclient2Upgrade libnutconf0Upgrade libnutscan4Upgrade nut-doc-imagesUpgrade nut-develUpgrade nut-classicUpgrade libupsclient7Upgrade libnutscan2Upgrade libupsclient1Upgrade nut-drivers-net | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade nutUpgrade nut-server | Nov 8, 2024 | Jun 1, 2012 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub