CVE-2020-14983
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't valid ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 10 | chocolate-doom, crispy-doom | 3.0.0-4+deb10u1 |
| debian 11 | chocolate-doom, crispy-doom | 3.0.1-1 und 1 weitere |
| debian 12 | chocolate-doom, crispy-doom | 3.0.1-1 und 1 weitere |
| debian 13 | chocolate-doom, crispy-doom | 3.0.1-1 und 1 weitere |
| debian 14 | chocolate-doom, crispy-doom | 3.0.1-1 und 1 weitere |
| debian 8 | chocolate-doom | kein Fix angegeben |
| debian 9 | chocolate-doom | kein Fix angegeben |
| echo | chocolate-doom, crispy-doom | 3.0.1-1 und 1 weitere |
| ubuntu 20.04-ESM | crispy-doom | kein Fix angegeben |
Alle 15 Einträge aus 9 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 10 | chocolate-doom | 3.0.0-4+deb10u1 |
| debian 10 | crispy-doom | kein Fix angegeben |
| debian 11 | chocolate-doom | 3.0.1-1 |
| debian 11 | crispy-doom | 5.9.0-1 |
| debian 12 | chocolate-doom | 3.0.1-1 |
| debian 12 | crispy-doom | 5.9.0-1 |
| debian 13 | chocolate-doom | 3.0.1-1 |
| debian 13 | crispy-doom | 5.9.0-1 |
| debian 14 | chocolate-doom | 3.0.1-1 |
| debian 14 | crispy-doom | 5.9.0-1 |
| debian 8 | chocolate-doom | kein Fix angegeben |
| debian 9 | chocolate-doom | kein Fix angegeben |
| echo | chocolate-doom | 3.0.1-1 |
| echo | crispy-doom | 5.9.0-1 |
| ubuntu 20.04-ESM | crispy-doom | kein Fix angegeben |
Referenzen
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00012.html
- https://github.com/chocolate-doom/chocolate-doom/issues/1293
- https://www.cve.org/CVERecord?id=CVE-2020-14983