CVE-2023-24809

概要

参考情報

• NetHack/NetHack security advisory · Vendor Advisory
• nethack.org/security/CVE-2023-24809.html · Vendor Advisory

nethack のその他の脆弱性

• CVE-2020-5254高 8.1In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.
• CVE-2020-5253緊急 9.8NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be e…
• CVE-2020-5211緊急 9.8In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow res…
• CVE-2020-5214緊急 9.8In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code exec…
• CVE-2020-5213緊急 9.8In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or re…