CVE-2024-25003

Name of the Vulnerable Software and Affected Versions KiTTY versions 0.76.1.13 and before

Description The issue is a stack-based buffer overflow that occurs via the hostname due to insufficient bounds checking and input sanitization. This allows an attacker to overwrite adjacent memory, leading to arbitrary code execution.

Recommendations For KiTTY versions 0.76.1.13 and before, consider disabling the use of hostnames until a patch is available to prevent exploitation of the stack-based buffer overflow. At the moment, there is no information about a newer version that contains a fix for this vulnerability.