Description
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | nut | 2.6.4-1 | — |
| Debian 13 | nut | 2.6.4-1 | — |
| Debian 12 | nut | 2.6.4-1 | — |
| Debian 6.0 | nut | 2.4.3-1.1squeeze2 | DSA-2484-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | nut | 2.7.3-2.7 | openSUSE-SU-2024:10009-1 |
Advisories 2
- DSA-2484-1 nut - denial of service Debian Security (DSA / DLA) · Mar 9, 2026
- openSUSE-SU-2024:10009-1 libupsclient1-2.7.3-2.7 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- networkupstools-addchar-bo(75980) vdb-entry
- DSA-2484 vendor-advisory
- http://alioth.debian.org/tracker/?func=detail&aid=313636
- MDVSA-2012:087 vendor-advisory
- 50389 third-party-advisory
- http://trac.networkupstools.org/projects/nut/changeset/3633
- openSUSE-SU-2012:1069 vendor-advisory
- 49348 third-party-advisory
- http://networkupstools.org/docs/user-manual.chunked/apis01.html
- 53743 vdb-entry
- 82409 vdb-entry