CVE-2024-25003 : KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overfl

KiTTY versions 0.76.1.13 and before is vulnerable to a stack-based buffer overflow via the hostname, occurs due to insufficient bounds checking and input sanitization. This allows an attacker to overwrite adjacent memory, which leads to arbitrary code execution.

Published 2024-02-09 07:16:01

Updated 2025-05-08 19:16:00

Source MITRE

View at NVD, CVE.org

Vulnerability category: Overflow

Products affected by CVE-2024-25003

9bis » Kitty » For Windows
Versions up to, including, (<=) 0.76.1.13
cpe:2.3:a:9bis:kitty:*:*:*:*:*:windows:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2024-25003

EPSS FAQ

0.41%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 60 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2024-25003

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	134c704f-9b21-4f2e-91b3-4a467353bcc0	2025-05-08
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST	2024-02-14
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2024-25003

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.
Assigned by:
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2024-25003

http://seclists.org/fulldisclosure/2024/Feb/14

Full Disclosure: Buffer Overflow Vulnerabilities in KiTTY Start Duplicated Session Hostname (CVE-2024-25003) & Username (CVE-2024-25004) Variables
Exploit;Mailing List;Third Party Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/177032/KiTTY-0.76.1.13-Buffer-Overflows.html

KiTTY 0.76.1.13 Buffer Overflows ≈ Packet Storm
Third Party Advisory;VDB Entry

CVEs referencing this url
http://seclists.org/fulldisclosure/2024/Feb/13

Full Disclosure: Command Injection Vulnerability in KiTTY Get Remote File Through SCP Input (CVE-2024-23749)
Exploit;Mailing List;Third Party Advisory

CVEs referencing this url
http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html

KiTTY 0.76.1.13 Command Injection ≈ Packet Storm

CVEs referencing this url
https://blog.defcesco.io/CVE-2024-25003-CVE-2024-25004

Buffer Overflow Vulnerabilities in KiTTY Start Duplicated Session Hostname (CVE-2024-25003) & Username (CVE-2024-25004) Variables · BRIDGEBLOG
Exploit;Third Party Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2024-25003

Products affected by CVE-2024-25003

Exploit prediction scoring system (EPSS) score for CVE-2024-25003

CVSS scores for CVE-2024-25003

CWE ids for CVE-2024-25003

References for CVE-2024-25003