Vulnerabilities > 9Bis > Kitty > 0.71.0.4

DATE CVE VULNERABILITY TITLE RISK
2024-02-09 CVE-2024-23749 Command Injection vulnerability in 9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390).
local
low complexity
9bis CWE-77
7.8
7.8
2024-02-09 CVE-2024-25003 Out-of-bounds Write vulnerability in 9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization.
local
low complexity
9bis CWE-787
7.8
7.8
2024-02-09 CVE-2024-25004 Out-of-bounds Write vulnerability in 9Bis Kitty
KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the username, occurs due to insufficient bounds checking and input sanitization (at line 2600).
local
low complexity
9bis CWE-787
7.8
7.8
2023-12-18 CVE-2023-48795 Improper Validation of Integrity Check Value vulnerability in multiple products
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. 		5.9
5.9