Summary
It was discovered that DMitry incorrectly handled long arguments, leading
to a stack-based buffer overflow. An attacker could possibly use this issue
to cause DMitry to crash, resulting in a denial of service, or possibly
execute arbitrary code. (CVE-2017-7938)
It was discovered that DMitry incorrectly handled long lines in WHOIS
responses, leading to a stack-based buffer overflow. A remote attacker
could possibly use this issue to cause DMitry to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2020-14931)
It was discovered that DMitry contained a format string vulnerability. An
attacker could possibly use this issue to cause DMitry to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2024-31837)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | dmitry | 1.3a-1ubuntu0.16.04.1~esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | dmitry | 1.3a-1ubuntu0.18.04.1~esm1 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | dmitry | 1.3a-1ubuntu0.20.04.1~esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | dmitry | 1.3a-1.2ubuntu0.22.04.1~esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | dmitry | 1.3a-3ubuntu0.1~esm1 |
Vulnerabilities 3
-
High 8.4
DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a threat model similar to CV…
-
Medium 6.6CVE-2017-7938 Public exploit
Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to ca…
-
Unscored —
A stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) 1.3a might allow remote WHOIS servers to…