CVE-2017-7938

Stack-based buffer overflow in DMitry (Deepmagic Information Gathering Tool) version 1.3a (Unix) allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long argument. An example threat model is automated execution of DMitry with hostname strings found in local log files.

• CWE-119

• https://cxsecurity.com/issue/WLB-2017040113Exploit, Third Party Advisory
• https://github.com/jaygreig86/dmitry/pull/12
• https://packetstormsecurity.com/files/142210/Dmitry-1.3a-Local-Stack-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41898/
• https://cxsecurity.com/issue/WLB-2017040113Exploit, Third Party Advisory
• https://github.com/jaygreig86/dmitry/pull/12
• https://lists.debian.org/debian-lts-announce/2024/10/msg00024.html
• https://packetstormsecurity.com/files/142210/Dmitry-1.3a-Local-Stack-Buffer-Overflow.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41898/

Published

Apr 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7932An improper certificate validation issue was discovered in N…
• CVE-2017-7933In ABB IP GATEWAY 3.39 and prior, some configuration files c…
• CVE-2017-7934An Improper Authentication issue was discovered in OSIsoft P…
• CVE-2017-7935A Resource Exhaustion issue was discovered in Phoenix Contac…
• CVE-2017-7936A stack-based buffer overflow issue was discovered in NXP i.…
• CVE-2017-7937An Improper Authentication issue was discovered in Phoenix C…
• CVE-2017-7939The read_next_pam_token function in imagew-pnm.c in libimage…
• CVE-2017-7940The iw_read_gif_file function in imagew-gif.c in libimagewor…
• CVE-2017-7941The ReadSGIImage function in sgi.c in ImageMagick 7.0.5-4 al…
• CVE-2017-7942The ReadAVSImage function in avs.c in ImageMagick 7.0.5-4 al…
• CVE-2017-7943The ReadSVGImage function in svg.c in ImageMagick 7.0.5-4 al…
• CVE-2017-7944XOOPS Core 2.5.8.1 has XSS due to unescaped HTML output of a…