Description
Buffer overflow in the permitted function of GNOME gtop daemon (libgtop_daemon) in libgtop 1.0.13 and earlier may allow remote attackers to execute arbitrary code via long authentication data.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | libgtop | 1.0.13-3.1 | DSA-301 |
Advisories 1
- DSA-301 libgtop - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- VU#705771 third-party-advisory
- 3594 vdb-entry
- DSA-301 vendor-advisory
- DSA-098 vendor-advisory
- 20011128 Re: [CERT-intexxia] libgtop_daemon Remote Format String Vulnerability mailing-list