Product

debian/netris vulnerabilities

3 published CVES affecting debian/netris, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 3
Critical: 0
High: 1
Medium: 1
Low: 0
Unscored: 1
CISA KEV: 0

Latest debian/netris CVEs

Newest publication first

DSA-372 netris - buffer overflow
Published 2003-08-16

Unknown
CVE-2003-0685 Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.
Published 2003-08-15

HighCVSS 7.5 EPSS 2.4%

Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.
CVE-2002-1566 netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.
Published 2003-08-15

MediumCVSS 5.0 EPSS 3.4%

netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

debian/netris vulnerabilities

Latest debian/netris CVEs

DSA-372 netris - buffer overflow

CVE-2003-0685 Buffer overflow in Netris 0.52 and earlier, and possibly other versions, allows remote malicious Netris servers to execute arbitrary code on netris clients via a long server response.

CVE-2002-1566 netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.