wb2osz Dire Wolf up to 1.8 src/kiss_frame.c kiss_rec_byte stack-based overflow

Summaryinfo

A vulnerability classified as critical was found in wb2osz Dire Wolf up to 1.8. This issue affects the function kiss_rec_byte of the file src/kiss_frame.c. Executing a manipulation can lead to stack-based overflow. This vulnerability is tracked as CVE-2025-34457. The attack can be launched remotely. No exploit exists. Applying a patch is advised to resolve this issue.

Detailsinfo

A vulnerability has been found in wb2osz Dire Wolf up to 1.8 and classified as critical. This vulnerability affects the function kiss_rec_byte of the file src/kiss_frame.c. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

wb2osz/direwolf (Dire Wolf) versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kiss_rec_byte() located in src/kiss_frame.c. When processing crafted KISS frames that reach the maximum allowed frame length (MAX_KISS_LEN), the function appends a terminating FEND byte without reserving sufficient space in the stack buffer. This results in an out-of-bounds write followed by an out-of-bounds read during the subsequent call to kiss_unwrap(), leading to stack memory corruption or application crashes. This vulnerability may allow remote unauthenticated attackers to trigger a denial-of-service condition.

The weakness was disclosed by Vlatko Kosturjak as 617. The advisory is shared for download at github.com. This vulnerability was named CVE-2025-34457 since 04/15/2025. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available.

The vulnerability scanner Nessus provides a plugin with the ID 279645 (Linux Distros Unpatched Vulnerability : CVE-2025-34457), which helps to determine the existence of the flaw in a target environment.

Applying the patch 694c954 is able to eliminate this problem. The bugfix is ready for download at github.com.

The vulnerability is also documented in the vulnerability database at Tenable (279645). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• wb2osz

Name

• Dire Wolf

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8

License

• open-source

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion