CVE-2020-5254: falha de baixa gravidade em NetHack
NetHack hilite_status parsing privilege escalation
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.9epss 1.1%
In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
NetHack · NetHackCVEs relacionadas — NetHack
No mesmo produto, das mais perigosas para as menos.
CVE-2020-5211MEDIUMNetHack AUTOCOMPLETE configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2020-5214MEDIUMNetHack error recovery after syntax error in configuration file is subject to a buffer overflowEPSS 1.1%CVE-2020-5212MEDIUMNetHack MENUCOLOR configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2020-5213MEDIUMNetHack SYMBOL configuration file option is subject to a buffer overflowEPSS 1.1%CVE-2020-5209MEDIUMNetHack command line parsing of options starting with -de and -i is subject to a buffer overflowEPSS 0.8%CVE-2020-5210MEDIUMNetHack command line -w option parsing is subject to a buffer overflowEPSS 0.8%