CVE-2024-52949

Name of the Vulnerable Software and Affected Versions iptraf-ng version 1.2.1

Description The issue is related to a stack-based buffer overflow in the iptraf-ng utility, which can be exploited by a remote attacker to execute arbitrary code. This occurs due to the strcpy function in src/ifaces.c failing to control the size of input data, leading to a potential overflow of memory on the stack.

Recommendations For iptraf-ng version 1.2.1, consider disabling the strcpy function in src/ifaces.c or restricting its use until a patch is available to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.