Vulnerability · Published Jan 15, 2025 · Assigned by jpcert
CVE-2024-55577
High 7.0
In plain English
A high-severity stack buffer overflow in Linux Ratfor from The Dimensional Gate Co.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | ratfor | no fix listed | DEBIAN-CVE-2024-55577 |
| Debian:13 | ratfor | 1.07-1 | DEBIAN-CVE-2024-55577 |
| Debian:14 | ratfor | 1.07-1 | DEBIAN-CVE-2024-55577 |
| Ubuntu:22.04:LTS | ratfor | no fix listed | UBUNTU-CVE-2024-55577 |
| Ubuntu:24.04:LTS | ratfor | no fix listed | UBUNTU-CVE-2024-55577 |
| Ubuntu:25.10 | ratfor | no fix listed | UBUNTU-CVE-2024-55577 |
| Ubuntu:26.04:LTS | ratfor | no fix listed | UBUNTU-CVE-2024-55577 |
| Ubuntu:26.10 | ratfor | no fix listed | UBUNTU-CVE-2024-55577 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Dimensional Gate Co. | Linux Ratfor | 1.06 and earlier |
Weakness: CWE-121 · Vector: CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H