CVE-2020-14983
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't valid ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Ubuntu (orta).
Açıklama
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | chocolate-doom, crispy-doom | 3.0.0-4+deb10u1 |
| debian 11 | chocolate-doom, crispy-doom | 3.0.1-1 ve 1 tane daha |
| debian 12 | chocolate-doom, crispy-doom | 3.0.1-1 ve 1 tane daha |
| debian 13 | chocolate-doom, crispy-doom | 3.0.1-1 ve 1 tane daha |
| debian 14 | chocolate-doom, crispy-doom | 3.0.1-1 ve 1 tane daha |
| debian 8 | chocolate-doom | düzeltme belirtilmemiş |
| debian 9 | chocolate-doom | düzeltme belirtilmemiş |
| echo | chocolate-doom, crispy-doom | 3.0.1-1 ve 1 tane daha |
| ubuntu 20.04-ESM | crispy-doom | düzeltme belirtilmemiş |
9 kaynaktaki 15 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 10 | chocolate-doom | 3.0.0-4+deb10u1 |
| debian 10 | crispy-doom | düzeltme belirtilmemiş |
| debian 11 | chocolate-doom | 3.0.1-1 |
| debian 11 | crispy-doom | 5.9.0-1 |
| debian 12 | chocolate-doom | 3.0.1-1 |
| debian 12 | crispy-doom | 5.9.0-1 |
| debian 13 | chocolate-doom | 3.0.1-1 |
| debian 13 | crispy-doom | 5.9.0-1 |
| debian 14 | chocolate-doom | 3.0.1-1 |
| debian 14 | crispy-doom | 5.9.0-1 |
| debian 8 | chocolate-doom | düzeltme belirtilmemiş |
| debian 9 | chocolate-doom | düzeltme belirtilmemiş |
| echo | chocolate-doom | 3.0.1-1 |
| echo | crispy-doom | 5.9.0-1 |
| ubuntu 20.04-ESM | crispy-doom | düzeltme belirtilmemiş |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00007.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00012.html
- https://github.com/chocolate-doom/chocolate-doom/issues/1293
- https://www.cve.org/CVERecord?id=CVE-2020-14983