iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails     to control the size, and it is consequently possible to overflow memory on the stack. (CVE-2024-52949)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    VUL-0: CVE-2024-52949: iptraf-ng: limit interface name lengths to IFNAMSIZ(CVE-2024-52949)

Tenable has extracted the preceding description block directly from the EulerOS iptraf-ng security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the iptraf-ng package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    iptraf-ng 1.2.1 has a stack-based buffer overflow.(CVE-2024-52949)

Tenable has extracted the preceding description block directly from the EulerOS iptraf-ng security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of iptraf-ng installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52949 advisory.

  - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails     to control the size, and it is consequently possible to overflow memory on the stack. (CVE-2024-52949)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of iptraf-ng installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-52949 advisory.

  - iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails     to control the size, and it is consequently possible to overflow memory on the stack. (CVE-2024-52949)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
231297	Linux Distros Unpatched Vulnerability : CVE-2024-52949	Nessus	Misc.	critical
216019	EulerOS 2.0 SP12 : iptraf-ng (EulerOS-SA-2025-1175)	Nessus	Huawei Local Security Checks	critical
215997	EulerOS 2.0 SP11 : iptraf-ng (EulerOS-SA-2025-1139)	Nessus	Huawei Local Security Checks	critical
215991	EulerOS 2.0 SP12 : iptraf-ng (EulerOS-SA-2025-1191)	Nessus	Huawei Local Security Checks	critical
215985	EulerOS 2.0 SP11 : iptraf-ng (EulerOS-SA-2025-1158)	Nessus	Huawei Local Security Checks	critical
215511	Azure Linux 3.0 Security Update: iptraf-ng (CVE-2024-52949)	Nessus	Azure Linux Local Security Checks	critical
213408	CBL Mariner 2.0 Security Update: iptraf-ng (CVE-2024-52949)	Nessus	MarinerOS Local Security Checks	critical

Detections

Analytics

CVE-2024-52949

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical