PatchTheCVEtraceroute vulnerabilities and fixes
Recent CVEs affecting traceroute, with upgrade or downgrade steps. 2 tracked.
traceroute has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2023-10-25. Highest priority: CVE-2018-21268 (score 68/100).
- CVE-2023-46316 MEDIUM 5.5 UPGRADE MITIGATE In buc Traceroute 2.0.12 through 2.1.2 before 2.1.3, the wrapper scripts do not properly parse command lines.
- CVE-2018-21268 CRITICAL 10.0 UPGRADE The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the
FAQ
How do I fix traceroute vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is traceroute being exploited right now?
None of the tracked traceroute CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which traceroute CVE should I patch first?
CVE-2018-21268 currently ranks highest (68/100): The traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the.