{"id":"CVE-2023-46316","aliases":["ALPINE-CVE-2023-46316","ALSA-2024:2483","ALSA-2024:3211","AZL-31746","CLSA-2025-1753299555","DEBIAN-CVE-2023-46316","EUVD-2023-50537","GHSA-x3vv-qh4r-crf2","MGASA-2024-0168","OESA-2023-1784","RHSA-2024:2483","RHSA-2024:3211","RHSA-2025:0823","RLSA-2024:2483","RLSA-2024:3211","SUSE-SU-2023:4623-1","SUSE-SU-2023:4656-1","SUSE-SU-2024:2468-1","UBUNTU-CVE-2023-46316","USN-6478-1","openSUSE-SU-2024:13418-1"],"status":"published","title":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse...","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00387,"percentile":0.331,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-234"],"published":"2023-10-24T00:00:00Z","modified":"2026-11-03T06:32:43Z","fixes":[{"ecosystem":"Alpine:v3.18","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"traceroute","fixed_in":["2.1.3-r0"],"sources":["osv"]},{"ecosystem":"AlmaLinux:9","package":"traceroute","fixed_in":["3:2.1.0-18.el9"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"traceroute","fixed_in":["3:2.1.0-8.el8"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"traceroute","fixed_in":["2.1.3-1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"traceroute","fixed_in":["3:2.1.0-16.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"traceroute","fixed_in":["1:2.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"traceroute","fixed_in":["1:2.1.3-1"],"sources":["osv"]},{"ecosystem":"Mageia:9","package":"traceroute","fixed_in":["2.1.3-1.mga9"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"traceroute","fixed_in":["2.1.2-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"traceroute","fixed_in":["2.1.2-2.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"traceroute","fixed_in":["2.1.2-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"traceroute","fixed_in":["2.1.2-2.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP2","package":"traceroute","fixed_in":["2.1.2-2.oe2203sp2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"traceroute","fixed_in":["3:2.1.0-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"traceroute-debuginfo","fixed_in":["3:2.1.0-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"traceroute-debugsource","fixed_in":["3:2.1.0-18.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"traceroute","fixed_in":["3:2.1.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"traceroute-debuginfo","fixed_in":["3:2.1.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"traceroute-debugsource","fixed_in":["3:2.1.0-8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"traceroute","fixed_in":["3:2.1.0-8.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"traceroute-debuginfo","fixed_in":["3:2.1.0-8.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"traceroute-debugsource","fixed_in":["3:2.1.0-8.el8_8"],"sources":["osv"]},{"ecosystem":"Rocky Linux:9","package":"traceroute","fixed_in":["3:2.1.0-18.el9"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"traceroute","fixed_in":["3:2.1.0-8.el8"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.4","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"traceroute","fixed_in":["2.0.21-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"traceroute","fixed_in":["2.0.19-3.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"traceroute","fixed_in":["2.0.19-3.6.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"traceroute","fixed_in":["1:2.0.20-0ubuntu0.1+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"traceroute","fixed_in":["1:2.0.21-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"traceroute","fixed_in":["1:2.1.0-2ubuntu0.18.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:20.04:LTS","package":"traceroute","fixed_in":["1:2.1.0-2ubuntu0.20.04.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"traceroute","fixed_in":["1:2.1.0-2ubuntu0.22.04.1~esm1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"traceroute","fixed_in":["2.1.3-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.18","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.0.12"},{"fixed":"2.1.3-r0"}]}]},{"source":"osv","ecosystem":"AlmaLinux:9","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-18.el9"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-16.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.1.2-1","1:2.1.3-1","1:2.1.4-1","1:2.1.5-1","1:2.1.6-1"]},{"source":"osv","ecosystem":"Debian:13","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.3-1"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1.mga9"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-2.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-2.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP2","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.2-2.oe2203sp2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"traceroute-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::baseos","package":"traceroute-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-18.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"traceroute-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"traceroute-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"traceroute-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"traceroute-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8_8"}]}]},{"source":"osv","ecosystem":"Rocky Linux:9","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-18.el9"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3:2.1.0-8.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.4","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.19-3.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.5","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.21-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.20-0ubuntu0.1+esm1"}]}],"versions":["1:2.0.19-3","1:2.0.20-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.21-1ubuntu0.1~esm1"}]}],"versions":["1:2.0.21-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["1:2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.0-2ubuntu0.20.04.1~esm1"}]}],"versions":["1:2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.0-2ubuntu0.22.04.1~esm1"}]}],"versions":["1:2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.20-0ubuntu0.1+esm1"}]}],"versions":["1:2.0.19-3","1:2.0.20-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.0.21-1ubuntu0.1~esm1"}]}],"versions":["1:2.0.21-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.0-2ubuntu0.18.04.1~esm1"}]}],"versions":["1:2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.0-2ubuntu0.20.04.1~esm1"}]}],"versions":["1:2.1.0-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.1.0-2ubuntu0.22.04.1~esm1"}]}],"versions":["1:2.1.0-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"traceroute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1.1"}]}]}],"products":[{"vendor":"buc","product":"traceroute"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://sourceforge.net/projects/traceroute/files/traceroute/traceroute-2.1.3/","tags":["x_transferred","Release Notes","advisory","article","report"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-46316","tags":["x_transferred","Third Party Advisory","advisory","report"]},{"url":"http://packetstormsecurity.com/files/176660/Traceroute-2.1.2-Privilege-Escalation.html","tags":["x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-46316","tags":["web","advisory"]},{"url":"https://sourceforge.net/projects/traceroute/files/traceroute/traceroute-2.1.3"},{"url":"https://github.com/advisories/GHSA-x3vv-qh4r-crf2"},{"url":"https://security.alpinelinux.org/vuln/CVE-2023-46316","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2483","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-46316","tags":["report"]},{"url":"https://bugzilla.redhat.com/2246303","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-2483.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:3211","tags":["advisory"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-3211.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1753299555.html","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0168.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33170","tags":["report"]},{"url":"https://lwn.net/Articles/971676/","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1784","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.4_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246303","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2483.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-46316","tags":["advisory","report"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.10_release_notes/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3211.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:0823","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0823.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:2483","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:3211","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234623-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1216591","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-46316","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20234656-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242468-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-46316","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6478-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-46316","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-24T00:00:00Z","modified":"2024-08-02T20:45:41.288Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-234"],"updated_at":"2026-11-02T14:35:22.984825Z"}],"euvd":[{"id":"EUVD-2023-50537","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-24T00:00:00Z","modified":"2024-08-02T20:45:41Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T03:49:58.369276Z"}],"ghsa":[{"id":"GHSA-x3vv-qh4r-crf2","title":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse...","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:32:24Z","modified":"2024-07-03T18:33:12Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-234"],"updated_at":"2026-11-02T14:57:33.79017Z"}],"nvd":[{"id":"CVE-2023-46316","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:17:37.61Z","modified":"2026-06-17T06:30:38.9Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-234"],"updated_at":"2026-11-02T14:08:40.004465Z"}],"osv":[{"id":"ALPINE-CVE-2023-46316","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:17:37.61Z","modified":"2026-11-03T06:32:43.768165194Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T07:17:02.90744Z"},{"id":"AZL-31746","title":"CVE-2023-46316 affecting package traceroute for versions less than 2.1.3-1","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:17:37Z","modified":"2026-04-21T04:26:29.680115Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:28:03.46006Z"},{"id":"CVE-2023-46316","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:17:37.61Z","modified":"2026-04-16T04:39:21.160740158Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:44:34.287121Z"},{"id":"DEBIAN-CVE-2023-46316","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:17:37.61Z","modified":"2026-10-26T18:03:07.334307484Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2023-1784","title":"traceroute security update","description":"Traceroute tracks the route packets taken from an IP network on their way to a given host. It utilizes the IP protocol\u0026apos;s time to live (TTL) field and attempts to elicit an ICMP TIME_EXCEEDED response from each gateway along the path to the host.\r\n\r\nSecurity Fix(es):\r\n\r\nIn buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.(CVE-2023-46316)","status":"published","published":"2023-11-03T11:06:13Z","modified":"2026-08-18T01:17:55.084392638Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:40.328856Z"},{"id":"RHSA-2024:2483","title":"Red Hat Security Advisory: traceroute security update","status":"published","published":"2024-09-16T17:05:36Z","modified":"2026-03-18T11:33:44.596772Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2024:3211","title":"Red Hat Security Advisory: traceroute security update","status":"published","published":"2024-09-16T17:05:45Z","modified":"2026-03-18T11:35:11.667272Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:13.30378Z"},{"id":"RHSA-2025:0823","title":"Red Hat Security Advisory: traceroute security update","status":"published","published":"2025-01-30T10:03:47Z","modified":"2026-03-18T11:36:51.828626Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RLSA-2024:2483","title":"Moderate: traceroute security update","description":"The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.\n\nSecurity Fix(es):\n\n* traceroute: improper command line parsing (CVE-2023-46316)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 9.4 Release Notes linked from the References section.","status":"published","published":"2025-05-07T19:13:03.633594Z","modified":"2025-05-07T20:08:45.056961Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"UBUNTU-CVE-2023-46316","description":"In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.","status":"published","published":"2023-10-25T18:17:00Z","modified":"2026-03-05T18:39:23.147243Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:2483","title":"Moderate: traceroute security update","description":"The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.\n\nSecurity Fix(es):\n\n* traceroute: improper command line parsing (CVE-2023-46316)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-04-30T00:00:00Z","modified":"2026-10-29T11:31:43.207136418Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"ALSA-2024:3211","title":"Moderate: traceroute security update","description":"The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.\n\nSecurity Fix(es):\n\n* traceroute: improper command line parsing (CVE-2023-46316)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2024-05-22T00:00:00Z","modified":"2026-10-29T11:02:26.340050191Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"CLSA-2025-1753299555","title":"traceroute: Fix of CVE-2023-46316","description":"- CVE-2023-46316: parse command lines properly in wrapper scripts","status":"published","published":"2025-07-23T19:39:19Z","modified":"2026-06-01T00:31:05.366308929Z","updated_at":"2026-11-02T15:43:42.025438Z"},{"id":"MGASA-2024-0168","title":"Updated traceroute packages fix security vulnerability","description":"In Traceroute 2.0.12 through 2.1.2 (before 2.1.3), the wrapper scripts\ndo not properly parse command lines. (CVE-2023-46316)\n","status":"published","published":"2024-05-09T02:40:29Z","modified":"2026-04-16T04:43:18.22724299Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"openSUSE-SU-2024:13418-1","title":"traceroute-2.1.3-1.1 on GA media","description":"These are all security issues fixed in the traceroute-2.1.3-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:25:16.343376Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"RLSA-2024:3211","title":"Moderate: traceroute security update","description":"The traceroute utility displays the route used by IP packets on their way to a specified network (or Internet) host.\n\nSecurity Fix(es):\n\n* traceroute: improper command line parsing (CVE-2023-46316)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.10 Release Notes linked from the References section.","status":"published","published":"2024-06-14T13:59:16.809606Z","modified":"2026-02-05T06:15:05.882001Z","updated_at":"2026-11-02T15:53:24.63379Z"},{"id":"SUSE-SU-2023:4623-1","title":"Security update for traceroute","description":"This update for traceroute fixes the following issues:\n\n- CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).\n","status":"published","published":"2023-11-30T18:22:39Z","modified":"2026-02-04T04:28:43.695587Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2023:4656-1","title":"Security update for traceroute","description":"This update for traceroute fixes the following issues:\n\n- CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).\n","status":"published","published":"2023-12-06T10:44:09Z","modified":"2026-02-04T02:15:11.18249Z","updated_at":"2026-11-02T15:53:53.865042Z"},{"id":"SUSE-SU-2024:2468-1","title":"Security update for traceroute","description":"This update for traceroute fixes the following issues:\n\n- CVE-2023-46316: wrapper scripts do not properly parse command lines (bsc#1216591).\n","status":"published","published":"2024-07-12T13:55:17Z","modified":"2026-02-04T04:40:43.764858Z","updated_at":"2026-11-02T15:53:55.136363Z"},{"id":"USN-6478-1","title":"traceroute vulnerability","description":"It was discovered that Traceroute did not properly parse command\nline arguments. An attacker could possibly use this issue to\nexecute arbitrary commands.\n","status":"published","published":"2023-11-14T10:43:25Z","modified":"2026-06-29T13:50:59.579357778Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}