CVE-2024-31837: High severity Deepmagic DMitry vulnerability
DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/dmitryto a version that resolves this vulnerability.Fixed in 1.3a-1.2+deb12u1 - Upgrade
Upgrade
debian/dmitryto a version that resolves this vulnerability.Fixed in 1.3a-5 - Upgrade
Upgrade
debian/dmitryto a version that resolves this vulnerability.Fixed in 1.3a-1.2+deb12u1Fixed in 1.3a-6Fixed in 1.3a-8
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31837?
CVE-2024-31837 is classified as a medium severity format-string vulnerability.
How do I fix CVE-2024-31837?
To fix CVE-2024-31837, update DMitry to the latest version or apply patches that address the format-string issues.
What software is affected by CVE-2024-31837?
CVE-2024-31837 affects the Deepmagic DMitry version 1.3a.
What are the potential consequences of CVE-2024-31837?
Exploitation of CVE-2024-31837 could lead to arbitrary code execution or crashes due to improper handling of strings.
Is there a workaround for CVE-2024-31837?
Currently, the recommended workaround for CVE-2024-31837 is to avoid using the current vulnerable version of DMitry until an update is available.