CVE-2016-20044

HIGH

PInfo 0.6.9-5.1 Local Buffer Overflow via -m Parameter

Title source: cna
STIX 2.1

Description

PInfo 0.6.9-5.1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -m parameter. Attackers can craft a malicious input string with 564 bytes of padding followed by a return address to overwrite the instruction pointer and execute shellcode with user privileges.

Exploits (1)

exploitdb WORKING POC
by Juan Sacco · pythonlocallinux
https://www.exploit-db.com/exploits/40023

Scores

CVSS v3 8.4
EPSS 0.0001
EPSS Percentile 0.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (2)
pinfo/PInfo 0.6.9-5.1
surf/pinfo < 0.6.9-5.1
Published Mar 28, 2026
Tracked Since Mar 29, 2026