UBUNTU-CVE-2024-31837: High severity ubuntu/dmitry vulnerability
Published Apr 30, 2024
·Updated
DMitry (Deepmagic Information Gathering Tool) 1.3a has a format-string vulnerability, with a threat model similar to CVE-2017-7938.
Affected Software
6 affected components
ubuntu/dmitry*
ubuntu/dmitry*
ubuntu/dmitry*
ubuntu/dmitry*
ubuntu/dmitry*
ubuntu/dmitry*
Event History
Apr 30, 2024
CVE Published
via OSV·07:15 AM
Data Sourced
via OSV·07:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Is this issue remotely exploitable?
The supplied CVSS vector lists a local attack vector (AV:L). An attacker needs local access to the affected system; the provided data does not indicate remote exploitation.
2
Does exploitation require privileges or user interaction?
The CVSS vector indicates no privileges are required (PR:N) and no user interaction is required (UI:N). A local attacker could therefore exploit it without relying on a victim to take an action.
3
How can I identify systems that may be affected?
Check Ubuntu systems for the dmitry package and determine whether they use DMitry 1.3a. The provided information specifically identifies version 1.3a and does not establish the status of other versions.