Vulnerabilities > 9Bis

DATE CVE VULNERABILITY TITLE RISK
2024-02-09 CVE-2024-23749 Command Injection vulnerability in 9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390).
local
low complexity
9bis CWE-77
7.8
2024-02-09 CVE-2024-25003 Out-of-bounds Write vulnerability in 9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization.
local
low complexity
9bis CWE-787
7.8
2024-02-09 CVE-2024-25004 Out-of-bounds Write vulnerability in 9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and input sanitization (at line 2600).
local
low complexity
9bis CWE-787
7.8
2016-04-07 CVE-2016-2563 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products
Stack-based buffer overflow in the SCP command-line utility in PuTTY before 0.67 and KiTTY 0.66.6.3 and earlier allows remote servers to cause a denial of service (stack memory corruption) or execute arbitrary code via a crafted SCP-SINK file-size response to an SCP download request.
network
low complexity
9bis simon-tatham CWE-119
7.5