CVE-2019-19905

概要

参考情報

• bugs.debian.org/947005 · Issue Tracking
• NetHack/NetHack commit f001de7 · Patch
• NetHack/NetHack commit f4a840a · Patch
• NetHack/NetHack security advisory · Third Party Advisory
• nethack.org/security · Vendor Advisory

nethack のその他の脆弱性

• CVE-2023-24809中 5.5NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the "C" (call)…
• CVE-2020-5254高 8.1In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.
• CVE-2020-5253緊急 9.8NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be e…
• CVE-2020-5211緊急 9.8In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow res…
• CVE-2020-5214緊急 9.8In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code exec…