Threats tagged 'ghsa-3mg2-x3p2-9ccr'

C-Kermit versions from 6.0.192 up to but not including 11.1.515 contain a buffer overflow vulnerability in the tn_snenv() function within ckctel.c. This flaw allows malicious Telnet servers or man-in-the-middle attackers to send specially crafted NEW-ENVIRON SEND subnegotiation messages before authentication, causing overflow of a 16-byte stack buffer and a miscalculated heap buffer. This memory corruption can compromise client memory integrity.