CVE-2004-1224: Mtr

Medium severity, CVSS 4.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.

Affected products

• Mtr Mtr: version 0.55 only; version 0.56 only; version 0.57 only; version 0.58 only; version 0.59 only; version 0.60 only; …

Published 2005-01-10. Last modified 2026-06-16.