CVE-2023-46316

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

Traceroute tracks the route packets taken from an IP network on their way to a given host. It utilizes the IP protocol's time to live (TTL) field and attempts to elicit an ICMP TIME_EXCEEDED response from each gateway along the path to the host.

Security Fix(es):

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.(CVE-2023-46316)

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.

Security Fix(es):

• traceroute: improper command line parsing (CVE-2023-46316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.

In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.

Security Fix(es):

• traceroute: improper command line parsing (CVE-2023-46316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.

Security Fix(es):

• traceroute: improper command line parsing (CVE-2023-46316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

• CVE-2023-46316: parse command lines properly in wrapper scripts

In Traceroute 2.0.12 through 2.1.2 (before 2.1.3), the wrapper scripts do not properly parse command lines. (CVE-2023-46316)

These are all security issues fixed in the traceroute-2.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.

Security Fix(es):

• traceroute: improper command line parsing (CVE-2023-46316)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.

This update for traceroute fixes the following issues:

• CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).

This update for traceroute fixes the following issues:

• CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).

This update for traceroute fixes the following issues:

• CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).

It was discovered that Traceroute did not properly parse command line arguments. An attacker could possibly use this issue to execute arbitrary commands.