Mtr

This hub aggregates every CVE we track for Mtr, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 5 most recently published vulnerabilities affecting Mtr.

• CVE-2025-49809mtr through 0.95, in certain privileged contexts, mishandles execution of a program specified by the MTR_PACKET environment variable. NOTE: mtr on macOS may often have Sudo rules, as an indirect co...7.8Jul 4, 2025
• CVE-2008-2357Stack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when invoked with the -p (aka --split) option, allows remote attackers to execute arbitrary code via a crafte...6.8May 21, 2008
• CVE-2004-1224Off-by-one error in the mtr_curses_keyaction function for mtr 0.55 through 0.65 allows local users to hijack raw sockets, as demonstrated using the "s" keybinding, which leaves a buffer without a N...4.6Dec 15, 2004
• CVE-2002-0497Buffer overflow in mtr 0.46 and earlier, when installed setuid root, allows local users to access a raw socket via a long MTR_OPTIONS environment variable.2.1Apr 2, 2003
• CVE-2000-0172The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root privileges.7.2Apr 10, 2000