CVE-2014-5439: Debian Linux

High severity, CVSS 7.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute arbitrary code.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only; version 10.0 only
• Sniffit Project Sniffit: up to and including 0.3.7

Published 2019-11-19. Last modified 2026-06-17.