CVE-2020-5211: falha de média gravidade em NetHack
NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5epss 1.1%
In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
NetHack · NetHackCVEs relacionadas — NetHack
No mesmo produto, das mais perigosas para as menos.
CVE-2020-5254LOWNetHack hilite_status parsing privilege escalationEPSS 1.1%CVE-2020-5214MEDIUMNetHack error recovery after syntax error in configuration file is subject to a buffer overflowEPSS 1.1%CVE-2020-5212MEDIUMNetHack MENUCOLOR configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2020-5213MEDIUMNetHack SYMBOL configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2020-5209MEDIUMNetHack command line parsing of options starting with -de and -i is subject to a buffer overflowEPSS 0.8%CVE-2020-5210MEDIUMNetHack command line -w option parsing is subject to a buffer overflowEPSS 0.8%