Threats tagged 'ghsa-524r-6fxq-72wj'

C-Kermit versions prior to 11.1.515 contain a heap buffer overflow vulnerability in the putsrv() function within ckcfns.c. This flaw allows malicious peers to write beyond the srvcmd buffer by sending specially crafted packets using Kermit repeat-count compression in server command, GET, or file-header packets. The vulnerability can lead to arbitrary code execution or denial of service on affected servers or receiving instances.