Vulnerability in Mtr

CVE-2004-1224

Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.

EPSS: 0.003 (25.8th percentile) — read the EPSS interpretation.

Affected products

  • Mtr — versions 0.55, 0.56, 0.57
  • N/a — versions n/a

References