CVE-2024-55577
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the...
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
CVE-2024-55577- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
EUVDEUVD-2024-52814
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
EUVD-2024-52814- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jr5j-7mpj-fh64
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the...
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
GHSA-jr5j-7mpj-fh64- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
NVD
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
CVE-2024-55577- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-121
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-55577
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
DEBIAN-CVE-2024-55577- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-55577
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
UBUNTU-CVE-2024-55577- CVSS 3.0
- 7.0 High
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow vulnerability exists in Linux Ratfor 1.06 and earlier. When the software processes a file which is specially crafted by an attacker, arbitrary code may be executed. As a result, the attacker may obtain or alter information of the user environment or cause the user environment to become unusable.
- Record
CVE-2024-55577- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
ratforDebian:12 |
All versions, plus listed versions 1.05-21.06-11.07-1 |
None known |
ratforDebian:13 |
before 1.07-1 | 1.07-1 |
ratforDebian:14 |
before 1.07-1 | 1.07-1 |
ratforUbuntu:16.04:LTS |
All versions, plus listed versions 1.0-15 |
None known |
ratforUbuntu:18.04:LTS |
All versions, plus listed versions 1.0-16 |
None known |
ratforUbuntu:20.04:LTS |
All versions, plus listed versions 1.0-161.03-21.04-1 |
None known |
ratforUbuntu:22.04:LTS |
All versions, plus listed versions 1.05-11.05-2 |
None known |
ratforUbuntu:24.04:LTS |
All versions, plus listed versions 1.05-2 |
None known |
ratforUbuntu:25.10 |
All versions, plus listed versions 1.07-1 |
None known |
ratforUbuntu:26.10 |
All versions, plus listed versions 1.07-1build1 |
None known |
ratforUbuntu:26.04:LTS |
All versions, plus listed versions 1.07-11.07-1build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-55577 is a high vulnerability (CVSS 7.0) in The Dimensional Gate Co. Linux Ratfor, published January 15, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.26%, the 18th percentile. Fixed in ratfor 1.07-1.