CVE-2020-5210 NetHack command line -w option parsing is subject to a buffer overflow

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

CVE-2020-5210

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

CVE-2020-5210

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

CVE-2020-5210

NetHack CVE-2020-5210 affects NetHack installations that run with privileged user rights (suid/sgid) on shared systems. The issue is caused by an invalid argument to the -w command line option in versions before 3.6.5, which can trigger a buffer overflow leading to a crash or remote code executio...

PT-2020-18306

Name of the Vulnerable Software and Affected Versions NetHack versions prior to 3.6.5 Description The issue is caused by an invalid argument to the -w command line option, leading to a buffer overflow. This can result in a crash or remote code execution/privilege escalation. It affects systems wi...

PT-2020-18310

Name of the Vulnerable Software and Affected Versions NetHack versions prior to 3.6.5 Description The issue is caused by detecting an unknown configuration file option, which can result in a buffer overflow. This can lead to a crash or remote code execution/privilege escalation. It affects system...

PT-2020-18308

Name of the Vulnerable Software and Affected Versions NetHack versions prior to 3.6.5 Description The issue is caused by an extremely long value for the MENUCOLOR configuration file option, which can result in a buffer overflow. This can lead to a crash or remote code execution/privilege...

PT-2020-18305

Name of the Vulnerable Software and Affected Versions NetHack versions prior to 3.6.5 Description The issue is caused by unknown options starting with -de and -i that can lead to a buffer overflow, resulting in a crash or remote code execution/privilege escalation. This affects systems with NetHa...

PT-2020-18309

Name of the Vulnerable Software and Affected Versions NetHack versions prior to 3.6.5 Description The issue is caused by a buffer overflow resulting from too long of a value for the SYMBOL configuration file option, potentially leading to a crash or remote code execution/privilege escalation. Thi...

PT-2020-18307

Name of the Vulnerable Software and Affected Versions NetHack versions prior to 3.6.5 Description The issue is caused by an invalid extended command in the value for the AUTOCOMPLETE configuration file option, leading to a buffer overflow. This can result in a crash or remote code...

CVE-2020-5211: Buffer Copy without Checking Size of Input

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

CVE-2020-5212: Buffer Copy without Checking Size of Input

In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users...

CVE-2020-5213: Buffer Copy without Checking Size of Input

In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to...

CVE-2020-5214: Buffer Copy without Checking Size of Input

In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own...

CVE-2020-5209: Buffer Copy without Checking Size of Input

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line...

CVE-2020-5210: Buffer Copy without Checking Size of Input

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

Fedora Update for nethack FEDORA-2019-1090bd0af2

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for nethack FEDORA-2019-79b80b66d9

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 30 : nethack (2019-79b80b66d9)

Update to NetHack 3.6.4 - fixes security issue with privilege escalation: http://nethack.org/security/index.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...

Fedora 31 : nethack (2019-1090bd0af2)

Update to NetHack 3.6.4 - fixes security issue with privilege escalation: http://nethack.org/security/index.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format...