CVE-2004-1915

Description

Buffer overflow in the parse_all_client_messages function in LCDproc 0.4.x up to 0.4.4 allows remote attackers to execute arbitrary code via a large number of arguments.

How to fix CVE-2004-1915

To remediate CVE-2004-1915, upgrade the affected package to a fixed version below.

• Debian/lcdproc—upgrade to 0.4.5 or later

Is CVE-2004-1915 being exploited?

Moderate — EPSS is 8.7%. Track this CVE but it's not at the top of the prioritisation list.

Affected packages (1)

• from 0, < 0.4.5

References (1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2004-1915