A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html | |
| https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html | Exploit Third Party Advisory |
| https://code.google.com/archive/p/nipper-ng/source/default/source | Third Party Advisory |
| https://github.com/guywhataguy/CVE-2019-17424 | Third Party Advisory |
| https://twitter.com/va_start | Third Party Advisory |
| http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html | |
| https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html | Exploit Third Party Advisory |
| https://code.google.com/archive/p/nipper-ng/source/default/source | Third Party Advisory |
| https://github.com/guywhataguy/CVE-2019-17424 | Third Party Advisory |
| https://twitter.com/va_start | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html - | |
| References | () https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html - Exploit, Third Party Advisory | |
| References | () https://code.google.com/archive/p/nipper-ng/source/default/source - Third Party Advisory | |
| References | () https://github.com/guywhataguy/CVE-2019-17424 - Third Party Advisory | |
| References | () https://twitter.com/va_start - Third Party Advisory |
Information
Published : 2019-10-22 13:15
Updated : 2024-11-21 04:32
NVD link : CVE-2019-17424
Mitre link : CVE-2019-17424
CVE.ORG link : CVE-2019-17424
JSON object : View
Products Affected
nipper-ng_project
- nipper-ng
CWE
CWE-787
Out-of-bounds Write