CVE-2024-52949: Iptraf-NG

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

iptraf-ng 1.2.1 has a stack-based buffer overflow. In src/ifaces.c, the strcpy function consistently fails to control the size, and it is consequently possible to overflow memory on the stack.

Affected products

• Iptraf-NG Iptraf-NG: version 1.2.1 only

Published 2024-12-16. Last modified 2026-06-17.