Most recent entries from all

ALSA-2025:7064 — Moderate: iptraf-ng security update

Affected: AlmaLinux:9: iptraf-ng

IPTraf-ng is a console-based network monitoring utility which includes an IP traffic monitor, a TCP and UDP service monitor, and a LAN statistics module. It supports Ethernet, FDDI, ISDN, SLIP, PPP, and loopback interfaces as well as the built-in raw socket interface of the Linux kernel.

Security Fix(es):

* iptraf-ng: buffer overflow via ifaces.c (CVE-2024-52949)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinuxRelease Notes linked from the References section.

bdu:2025-00501

EUVD-2026-226874

fkie_cve-2024-52949

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

GHSA-94mp-gc2x-rqm6

iptraf-ng 1.2.1 has a stack-based buffer overflow.

msrc_CVE-2024-52949 — iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control t…

msrc_CVE-2024-52949

OESA-2024-2499 — iptraf-ng security update

Affected: openEuler:20.03-LTS-SP4: iptraf-ng

IPTraf is a console-based network monitoring program for Linux that displays information about IP traffic. It returns such information as: Security Fix(es): VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZ(CVE-2024-52949)

openSUSE-SU-2024:14516-1 — iptraf-ng-1.2.2-1.1 on GA media

iptraf-ng-1.2.2-1.1 on GA media

UBUNTU-CVE-2024-52949

Affected: Ubuntu:16.04:LTS: iptraf-ng, Ubuntu:18.04:LTS: iptraf-ng, Ubuntu:20.04:LTS: iptraf-ng, Ubuntu:22.04:LTS: iptraf-ng, Ubuntu:24.04:LTS: iptraf-ng, Ubuntu:25.10: iptraf-ng, Ubuntu:26.04:LTS: iptraf-ng

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

WID-SEC-W-2025-1012 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder Dateien zu manipulieren.