CVE-2020-14931
A stack-based buffer overflow in DMitry (Deepmagic Information Gatheri ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to execute arbitrary code via a long line in a response that is mishandled by nic_format_buff.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 10 | dmitry | no fix listed |
| debian 11 | dmitry | 1.3a-1.1+deb11u1 |
| debian 12 | dmitry | 1.3a-1.2+deb12u1 |
| debian 13 | dmitry | 1.3a-5 |
| debian 14 | dmitry | 1.3a-5 |
| echo | dmitry | 1.3a-1.2+deb12u1 |
| rapidfort ubuntu 20.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 22.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 24.04 | dmitry | 0:1.3a-6 |
| ubuntu 18.04-ESM | dmitry | no fix listed |
| ubuntu 20.04-ESM | dmitry | no fix listed |
| ubuntu 22.04 | dmitry | no fix listed |
Show all 13 entries from 13 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 10 | dmitry | no fix listed |
| debian 11 | dmitry | 1.3a-1.1+deb11u1 |
| debian 12 | dmitry | 1.3a-1.2+deb12u1 |
| debian 13 | dmitry | 1.3a-5 |
| debian 14 | dmitry | 1.3a-5 |
| echo | dmitry | 1.3a-1.2+deb12u1 |
| rapidfort ubuntu 20.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 22.04 | dmitry | 0:1.3a-6 |
| rapidfort ubuntu 24.04 | dmitry | 0:1.3a-6 |
| ubuntu 18.04-ESM | dmitry | no fix listed |
| ubuntu 20.04-ESM | dmitry | no fix listed |
| ubuntu 22.04 | dmitry | no fix listed |
| ubuntu 24.04 | dmitry | no fix listed |