UBUNTU-CVE-2020-5210

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

UBUNTU-CVE-2020-5214

In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own...

CVE-2020-5211 NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

CVE-2020-5211

NetHack CVE-2020-5211 affects NetHack installations with suid/sgid and shared config-upload capabilities. The issue is an invalid extended command in the AUTOCOMPLETE option of the configuration file, causing a buffer overflow that can crash the process or enable remote code execution/privilege e...

CVE-2020-5211

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

CVE-2020-5212 NetHack MENUCOLOR configuration file option is subject to a buffer overflow

In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users...

CVE-2020-5212

In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users...

CVE-2020-5212

CVE-2020-5212 affects NetHack prior to 3.6.5. The vulnerability arises from an extremely long value for the MENUCOLOR configuration option, causing a buffer overflow that can crash the program or enable remote code execution/privilege escalation. It impacts systems with NetHack installed setuid/s...

CVE-2020-5213

In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to...

CVE-2020-5213 NetHack SYMBOL configuration file option is subject to a buffer overflow

In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to...

CVE-2020-5213

CVE-2020-5213 affects NetHack before 3.6.5. A too-long value in the SYMBOL configuration option can cause a buffer overflow, leading to crash or remote code execution/privilege escalation on systems where NetHack is installed with suid/sgid and where users can upload configuration files. The docu...

CVE-2020-5214 NetHack error recovery after syntax error in configuration file is subject to a buffer overflow

In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own...

CVE-2020-5214

NetHack before 3.6.5 is vulnerable to a buffer overflow when detecting an unknown configuration file option, potentially leading to a crash or remote code execution/privilege escalation on systems with NetHack installed as SUID/SGID or where users can upload configuration files. The issue is trac...

CVE-2020-5214

In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own...

CVE-2020-5209 NetHack command line parsing of options starting with -de and -i is subject to a buffer overflow

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line...

CVE-2020-5209

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line...

CVE-2020-5209

CVE-2020-5209 affects NetHack versions prior to 3.6.5. The vulnerability arises from buffer overflow triggered by unknown command-line options starting with -de and -i, which can lead to a crash or remote code execution/privilege escalation on systems with NetHack installed setuid/sgid or shared ...

CVE-2020-5210

NetHack CVE-2020-5210 affects NetHack installations that run with privileged user rights (suid/sgid) on shared systems. The issue is caused by an invalid argument to the -w command line option in versions before 3.6.5, which can trigger a buffer overflow leading to a crash or remote code executio...

CVE-2020-5210 NetHack command line -w option parsing is subject to a buffer overflow

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

CVE-2020-5210

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...