Description
Stack-based buffer overflow in kkstrtext.h in ktools library 0.3 and earlier, as used in products such as (1) centericq, (2) orpheus, (3) motor, and (4) groan, allows local users or remote attackers to execute arbitrary code via a long parameter to the VGETSTRING macro.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 4.0 | centericq | 4.21.0-6.0etch1 | DTSA-23-1 |
| Debian 3.1 | centericq | 4.20.0-1sarge4 | DSA-1088-1 |
| Debian 3.1 | motor | 2:3.4.0-2sarge1 | DSA-1083-1 |
| Debian 3.0 | centericq | 4.5.1-1.1woody2 | DSA-1088-1 |
| Debian 3.0 | motor | 2:3.2.2-2woody1 | DSA-1083-1 |
Advisories 3
- DSA-1083-1 motor - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DTSA-23-1 centericq - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-1088-1 centericq - buffer overflow Debian Security (DSA / DLA) · Mar 9, 2026
References
- 21684 third-party-advisory
- 17768 third-party-advisory
- ADV-2006-2062 vdb-entry
- 20368 third-party-advisory
- GLSA-200608-27 vendor-advisory
- GLSA-200512-11 vendor-advisory
- DSA-1088 vendor-advisory
- 15600 vdb-entry
- 20446 third-party-advisory
- http://www.zone-h.org/en/advisories/read/id=8480/
- 20329 third-party-advisory
- ktools-kkstrtext-bo(23233) vdb-entry
- DSA-1083 vendor-advisory
- ADV-2005-2605 vdb-entry
- 20051127 ZRCSA-200503 - ktools Buffer Overflow Vulnerability mailing-list
- 21161 vdb-entry
- 18081 third-party-advisory