CVE-2016-9400

CRITICAL 9.8CVE-2016-9400 · Published 22/02/2017 · updated 17/06/2026

In short

CVE-2016-9400 is a CRITICAL (CVSS 9.8) vulnerability affecting teeworlds (teeworlds).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.6% of all vulnerabilities.
Fix: update to 0.6.4 or later.

Package	Affected versions	Patched versions
teeworlds teeworlds	`< 0.6.4`	`0.6.4`

Description

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.

References

openwall.com/lists/oss-security/2016/11/16/8 · Mailing List
openwall.com/lists/oss-security/2016/11/17/8 · Mailing List
securityfocus.com/bid/94381 · Third Party Advisory
teeworlds/teeworlds commit ff25472 · Issue Tracking
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C4JNSBXXPE7O32ZMFK7D7YL6EKLG7PRV
security.gentoo.org/glsa/201705-13 · Third Party Advisory
teeworlds.com · Vendor Advisory

More vulnerabilities in teeworlds

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

teeworlds

< 0.6.4

0.6.4

More vulnerabilities in teeworlds

See all →