CVE-2019-17424 - A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file

Back Back to CVE browser

HIGH

A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file

Published Oct 22, 2019

7.8

HIGH

CVSS 3.1

EPSS 13.43%

Description

A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (5)

http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html
x_refsource_MISC
https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html
x_refsource_MISCExploitThird Party Advisory
https://code.google.com/archive/p/nipper-ng/source/default/source
x_refsource_MISCThird Party Advisory
https://github.com/guywhataguy/CVE-2019-17424
x_refsource_MISCThird Party Advisory
https://twitter.com/va_start
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/155378/nipper-ng-0.11.10-Remote-Buffer-Overflow.html		x_refsource_MISC
https://blog.vastart.dev/2019/10/stack-overflow-cve-2019-17424.html		x_refsource_MISCExploitThird Party Advisory
https://code.google.com/archive/p/nipper-ng/source/default/source		x_refsource_MISCThird Party Advisory
https://github.com/guywhataguy/CVE-2019-17424		x_refsource_MISCThird Party Advisory
https://twitter.com/va_start		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 22, 2019

Updated Aug 5, 2024

Reserved Oct 9, 2019

Link CVE-2019-17424

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-17424

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-17424