CVE-2020-14931
A stack-based buffer overflow in DMitry (Deepmagic Information Gatheri ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_format_buff.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 10 | dmitry | kein Fix angegeben |
| debian 11 | dmitry | 1.3a-1.1+deb11u1 |
| debian 12 | dmitry | 1.3a-1.2+deb12u1 |
| debian 13 | dmitry | 1.3a-5 |
| debian 14 | dmitry | 1.3a-5 |
| echo | dmitry | 1.3a-1.2+deb12u1 |
| rapidfort ubuntu 20.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 22.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 24.04 | dmitry | 0:1.3a-6 |
| ubuntu 18.04-ESM | dmitry | kein Fix angegeben |
| ubuntu 20.04-ESM | dmitry | kein Fix angegeben |
| ubuntu 22.04 | dmitry | kein Fix angegeben |
Alle 13 Einträge aus 13 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 10 | dmitry | kein Fix angegeben |
| debian 11 | dmitry | 1.3a-1.1+deb11u1 |
| debian 12 | dmitry | 1.3a-1.2+deb12u1 |
| debian 13 | dmitry | 1.3a-5 |
| debian 14 | dmitry | 1.3a-5 |
| echo | dmitry | 1.3a-1.2+deb12u1 |
| rapidfort ubuntu 20.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 22.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 24.04 | dmitry | 0:1.3a-6 |
| ubuntu 18.04-ESM | dmitry | kein Fix angegeben |
| ubuntu 20.04-ESM | dmitry | kein Fix angegeben |
| ubuntu 22.04 | dmitry | kein Fix angegeben |
| ubuntu 24.04 | dmitry | kein Fix angegeben |