https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2008-2357.htmlhttps://patchthecve.com/cve/CVE-2008-2357.htmlTue, 16 Jun 2026 22:53:36 +0000MEDIUM 6.8: Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafted DNS PTR record. NOTE: it could be argued that this is a vulnerability in the ns_name_ntop function ihttps://patchthecve.com/cve/CVE-2004-1224.htmlhttps://patchthecve.com/cve/CVE-2004-1224.htmlTue, 16 Jun 2026 22:07:17 +0000MEDIUM 4.6: Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a NULL terminator.https://patchthecve.com/cve/CVE-2002-0497.htmlhttps://patchthecve.com/cve/CVE-2002-0497.htmlTue, 16 Jun 2026 21:57:33 +0000LOW 2.1: Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.https://patchthecve.com/cve/CVE-2000-0172.htmlhttps://patchthecve.com/cve/CVE-2000-0172.htmlTue, 16 Jun 2026 21:51:09 +0000HIGH 7.2: The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.