CVE-2008-2357

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-05-21 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function in resolv/ns_name.c in glibc and the proper fix should be in glibc; if so, then this should not be treated as a vulnerability in mtr.

Affected products

Matt Kimball And Roger Wolff Mtr: through 0.72; 0.21, 0.22, 0.23, 0.24, 0.25, 0.26 (+45)

References

http://lists.opensuse.org/opensuse-security-announce/2008-07/msg00001.html
http://seclists.org/fulldisclosure/2008/May/0488.html
http://secunia.com/advisories/30312
http://secunia.com/advisories/30340
http://secunia.com/advisories/30359
http://secunia.com/advisories/30522
http://secunia.com/advisories/30967
http://security.gentoo.org/glsa/glsa-200806-01.xml
http://securityreason.com/securityalert/3903
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0175
http://www.debian.org/security/2008/dsa-1587

Get alerted when CVE-2008-2357 or the next vulnerability affects your stack