CVE-2023-46316

2023-10-2400:00:00

mitre

github.com

buc traceroute command injection vulnerability wrapper scripts parse command lines

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:buc:traceroute:*:*:*:*:*:linux:*:*"
    ],
    "vendor": "buc",
    "product": "traceroute",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.12"
      }
    ],
    "defaultStatus": "unknown"
  }
]