CVE-2017-7938 Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other im...
CriticalCVSS 9.8
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/dmitry(Debian:12) | < 1.3a-1.2+deb12u1 | 1.3a-1.2+deb12u1 |
| debian/dmitry(Debian:12) | = 1.3a-1.2 | No fix listed |
| debian/dmitry(Debian:13) | < 1.3a-5 | 1.3a-5 |
| debian/dmitry(Debian:14) | < 1.3a-5 | 1.3a-5 |
| mor-pah.net dmitry deepmagic information gathering tool | = 1.3a | No fix listed |
| ubuntu/dmitry(Ubuntu:24.04) | < 1.3a-3ubuntu0.1~esm1 | 1.3a-3ubuntu0.1~esm1 |
| ubuntu/dmitry(Ubuntu:22.04) | < 1.3a-1.2ubuntu0.22.04.1~esm1 | 1.3a-1.2ubuntu0.22.04.1~esm1 |
References
- Debian Security Tracker CVE-2017-7938 vendor-advisory
- bugs.debian.org issue-tracking
- Ubuntu CVE tracker vendor-advisory
- USN-8980-1 vendor-advisory
- www.cve.org
- cxsecurity.com exploit third-party-advisory
- github.com
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 41898 exploit
- lists.debian.org