VULNERABILITY INTELLIGENCE

CVE-2024-55577

CVSS score7 HIGH
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-01-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.

Weakness classification

  • vultures@jpcert.or.jp: CWE-121

Primary references