Lucene search
+L

264 matches found

OSV
OSV
•added 2018/10/20 10:29 p.m.•12 views

DEBIAN-CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.5CVSS7.6AI score0.02942EPSS
SaveExploits0References1
OSV
OSV
•added 2018/10/20 10:29 p.m.•21 views

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.5CVSS7.5AI score
SaveExploits0References6
Prion
Prion
•added 2018/10/20 10:29 p.m.•14 views

Design/Logic Flaw

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

5CVSS7.4AI score0.02942EPSS
SaveExploits0References6Affected Software2
NVD
NVD
•added 2018/10/20 10:29 p.m.•17 views

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.5CVSS7.4AI score0.02942EPSS
SaveExploits0References6
OSV
OSV
•added 2018/10/20 10:29 p.m.•12 views

UBUNTU-CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.5CVSS7.1AI score0.02942EPSS
SaveExploits0References9
Cvelist
Cvelist
•added 2018/10/20 10:00 p.m.•42 views

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.4AI score0.02942EPSS
SaveExploits0References6
Mend
Mend
•added 2018/10/20 10:00 p.m.•2 views

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

8.7CVSS0.02942EPSS
SaveExploits0References8
CVE
CVE
•added 2018/10/20 10:00 p.m.•165 views

CVE-2018-18541

Teeworlds vulnerability CVE-2018-18541 affects versions before 0.6.5, where connection packets could be forged due to lack of a challenge–response during connection setup. A remote attacker could spoof a IP to occupy all server slots or perform reflection attacks using map download packets. The i...

7.5CVSS7.3AI score0.02942EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
•added 2018/10/20 10:00 p.m.•65 views

CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.5CVSS7.6AI score0.02942EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/10/20 12:00 a.m.•3 views

PT-2018-14503

Name of the Vulnerable Software and Affected Versions Teeworlds versions prior to 0.6.5 Description The issue allows a remote attacker to forge connection packets due to the lack of a challenge-response mechanism during connection setup. This can lead to occupying all server slots or conducting a...

7.5CVSS0.02942EPSS
SaveExploits0References32
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/20 12:00 a.m.•7 views

CVE-2018-18541: Improper Input Validation

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

7.5CVSS7.3AI score0.02942EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2018/01/28 12:00 a.m.•22 views

Debian: Security Advisory (DLA-979)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References3
Gentoo Linux
Gentoo Linux
•added 2017/05/26 12:00 a.m.•35 views

Teeworlds: Remote execution of arbitrary code on client

Background Teeworlds is an online multi-player platform 2D shooter. Description Teeworlds client contains a vulnerability allowing a malicious server to execute arbitrary code, or write to arbitrary physical memory via the CClient::ProcessServerPacket method. Impact A remote malicious server can...

9.8CVSS5AI score0.03646EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2017/05/26 12:00 a.m.•35 views

GLSA-201705-13 : Teeworlds: Remote execution of arbitrary code on client

The remote host is affected by the vulnerability described in GLSA-201705-13 Teeworlds: Remote execution of arbitrary code on client Teeworlds client contains a vulnerability allowing a malicious server to execute arbitrary code, or write to arbitrary physical memory via the...

9.8CVSS8.9AI score0.03646EPSS
SaveExploits0References2
OSV
OSV
•added 2017/02/22 4:59 p.m.•10 views

UBUNTU-CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

9.8CVSS7.6AI score0.03646EPSS
SaveExploits0References4
Prion
Prion
•added 2017/02/22 4:59 p.m.•24 views

Code injection

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

7.5CVSS7.8AI score0.03646EPSS
SaveExploits0References7Affected Software2
UbuntuCve
UbuntuCve
•added 2017/02/22 4:59 p.m.•18 views

CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

9.8CVSS7.5AI score0.03646EPSS
SaveExploits0References3
OSV
OSV
•added 2017/02/22 4:59 p.m.•24 views

CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

9.8CVSS7.4AI score
SaveExploits0References7
OSV
OSV
•added 2017/02/22 4:59 p.m.•17 views

DEBIAN-CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

9.8CVSS7.8AI score0.03646EPSS
SaveExploits0References1
NVD
NVD
•added 2017/02/22 4:59 p.m.•22 views

CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

9.8CVSS9.5AI score0.03646EPSS
SaveExploits0References7
Rows per page
Query Builder