CVE-2017-7938
dmitry: Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to...
CVE-2017-7938 is fixed in dmitry on 1 platform, first by dmitry 1.3a-1ubuntu0.18.04.1~esm1, released April 30, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0499
92nd percentile
Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| dmitry · Debian 11.6 (bullseye) | 1.3a-1.1+deb11u1 | DLA-3933-1 | Oct 22, 2024 |
| dmitry · Ubuntu 18.04.6 LTS (bionic) | 1.3a-1ubuntu0.18.04.1~esm1 | dmitry 1.3a-1ubuntu0.18.04.1~esm1 | Apr 30, 2024 |
| dmitry · Ubuntu 20.04 LTS (focal) | 1.3a-1ubuntu0.20.04.1~esm1 | dmitry 1.3a-1ubuntu0.20.04.1~esm1 | Apr 30, 2024 |
| dmitry · Ubuntu 22.04.1 LTS (jammy) | 1.3a-1.2ubuntu0.22.04.1~esm1 | dmitry 1.3a-1.2ubuntu0.22.04.1~esm1 | Apr 30, 2024 |
| dmitry · Ubuntu 24.04.5 LTS (noble) | 1.3a-3ubuntu0.1~esm1 | dmitry 1.3a-3ubuntu0.1~esm1 | Apr 30, 2024 |