CVE-2023-46316

Published: Oct 25, 2023Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

Affected (4)

Products: Buc: Traceroute · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Buc Traceroute	From 2.0.12 to 2.1.3

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 11.0
Debian Debian Linux	Version 12.0

Related CWEs

Failure to Handle Missing Parameter

If too few arguments are sent to a function, the function will still pop the expected number of arguments from the stack. Potentially, a variable number of arguments could be exhausted in a function as well.

References (6)

http://packetstormsecurity.com/files/176660/Traceroute-2.1.2-Privilege-Escalation.html

Source: cve@mitre.org

https://security-tracker.debian.org/tracker/CVE-2023-46316

Source: cve@mitre.org

Third Party Advisory

https://sourceforge.net/projects/traceroute/files/traceroute/traceroute-2.1.3/

Source: cve@mitre.org

Release Notes

http://packetstormsecurity.com/files/176660/Traceroute-2.1.2-Privilege-Escalation.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://security-tracker.debian.org/tracker/CVE-2023-46316

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://sourceforge.net/projects/traceroute/files/traceroute/traceroute-2.1.3/

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

Timeline

No history available yet.