CVE-2019-17424

Published: Oct 22, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.

Affected (1)

Products: Nipper Ng Project: Nipper Ng

Nipper Ng Project

1 product

Nipper Ng

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nipper Ng Project Nipper Ng	Version 0.11.10

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (10)

http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html

Source: cve@mitre.org

https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://code.google.com/archive/p/nipper-ng/source/default/source

Source: cve@mitre.org

Third Party Advisory

https://github.com/guywhataguy/CVE-2019-17424

Source: cve@mitre.org

Third Party Advisory

https://twitter.com/va_start

Source: cve@mitre.org

Third Party Advisory

http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html