← Back

Mtr

mtr

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Mtr
mtr

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Mtr
1Mtr
Apr 16, 2026
Jan 10, 2005
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.
1Mtr
1Mtr
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
2.1 LOW· v2
Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.