CVE-2024-25004

Name of the Vulnerable Software and Affected Versions KiTTY versions 0.76.1.13 and before

Description The issue is a stack-based buffer overflow that occurs due to insufficient bounds checking and input sanitization via the username. This allows an attacker to overwrite adjacent memory, leading to arbitrary code execution. The vulnerability is located at line 2600.

Recommendations For KiTTY versions 0.76.1.13 and before, as a temporary workaround, consider restricting the input for the username variable to prevent exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.