Medium: iptraf-ng

Issue Overview: iptraf-ng 1.2.1 has a stack-based buffer overflow. CVE-2024-52949 Affected Packages: iptraf-ng Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories. Issue Correction: Run yum...

Amazon Linux 2 : iptraf-ng (ALAS-2025-2810)

The version of iptraf-ng installed on the remote host is prior to 1.1.4-7. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2810 advisory. iptraf-ng 1.2.1 has a stack-based buffer overflow. CVE-2024-52949 Tenable has extracted the preceding description block directly...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1237)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1266)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1252)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1265)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2024-52949

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible ...

EulerOS 2.0 SP11 : iptraf-ng (EulerOS-SA-2025-1158)

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : iptraf-ng 1.2.1 has a stack-based buffer overflow.CVE-2024-52949 Tenable has extracted the preceding description block directly from the EulerOS...

Azure Linux 3.0 Security Update: iptraf-ng (CVE-2024-52949)

The version of iptraf-ng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52949 advisory. - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fail...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1158)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1139)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1191)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : iptraf-ng (EulerOS-SA-2025-1191)

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZCVE-2024-52949 Tenable has extracted the preceding description block...

Huawei EulerOS: Security Advisory for iptraf-ng (EulerOS-SA-2025-1175)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP12 : iptraf-ng (EulerOS-SA-2025-1175)

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZCVE-2024-52949 Tenable has extracted the preceding description block...

EulerOS 2.0 SP11 : iptraf-ng (EulerOS-SA-2025-1139)

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : iptraf-ng 1.2.1 has a stack-based buffer overflow.CVE-2024-52949 Tenable has extracted the preceding description block directly from the EulerOS...

The vulnerability of the iptraf-ng monitoring tool, related to copying buffers without checking the size of input data, allows a hacker to execute arbitrary code.

The vulnerability of the iptraf-ng network monitoring utility lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2024-52949 affecting package iptraf-ng for versions less than 1.2.2-1

CVE-2024-52949 affecting package iptraf-ng for versions less than 1.2.2-1. An upgraded version of the package is available that resolves this issue...

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

...

CBL Mariner 2.0 Security Update: iptraf-ng (CVE-2024-52949)

The version of iptraf-ng installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52949 advisory. - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fail...