CVE-2017-7938: Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application…

PriorityP433medium6.6CVSS 3.1

AVLACLPRLUINSUCLILAH

EXPLOIT

EPSS

4.99%

91.1th percentile

Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
debian	dmitry	< dmitry 1.3a-1.2+deb12u1 (bookworm)	dmitry 1.3a-1.2+deb12u1 (bookworm)
mor-pah.net	dmitry_deepmagic_information_gathering_tool	—	—
mor-pah.net	dmitry_deepmagic_information_gathering_tool	>= 0 < 1.3a-1.1+deb11u1	1.3a-1.1+deb11u1
mor-pah.net	dmitry_deepmagic_information_gathering_tool	>= 0 < 1.3a-1.2+deb12u1	1.3a-1.2+deb12u1
mor-pah.net	dmitry_deepmagic_information_gathering_tool	>= 0 < 1.3a-5	1.3a-5
mor-pah.net	dmitry_deepmagic_information_gathering_tool	>= 0 < 1.3a-5	1.3a-5

CVSS provenance

nvdv3.16.6MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

osv6.6MEDIUM

vendor_debian6.6MEDIUM

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.