CVE-2017-20229 in MAWK
Summary
MAWK 1.3.3-17 and prior contains a stack-based buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting inadequate boundary checks on user-supplied input. Attackers can craft malicious input that overflows the stack buffer and execute a return-oriented programming chain to spawn a shell with application privileges.
Responsible
VulnCheck
Reservation
03/28/2026
Disclosure
03/28/2026
Entries
| Published | Base | Temp | Vulnerability | CWE | Prod | Exp | Cou | EPSS | CTI | CVE |
|---|---|---|---|---|---|---|---|---|---|---|
| 03/28/2026 | 8.5 | 8.2 | MAWK out-of-bounds write | 787 | Unknown | Proof-of-Concept | Not defined | 0.00077 | 1.71 | CVE-2017-20229 |