Medium USN-6478-1 1 CVE

traceroute vulnerability

Published Nov 14, 2023 · Updated Jun 29, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Traceroute did not properly parse command
line arguments. An attacker could possibly use this issue to
execute arbitrary commands.

Fixed packages 5

Release	Package	Fixed in
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS	traceroute	1:2.0.20-0ubuntu0.1+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS	traceroute	1:2.0.21-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	traceroute	1:2.1.0-2ubuntu0.18.04.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS	traceroute	1:2.1.0-2ubuntu0.20.04.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS	traceroute	1:2.1.0-2ubuntu0.22.04.1~esm1

Vulnerabilities 1

Medium 5.5

CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

traceroute traceroute traceroute traceroute Debian Ubuntu Azure Linux Alpine

Oct 24, 2023

References

report
https://ubuntu.com/security/CVE-2023-46316