Teeworlds 安全漏洞

Teeworlds is a multiplayer online shooter. A security vulnerability exists in Teeworlds version v0.7.5, which stems from the fact that the system contains a memory leak...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

CVE-2023-31518

A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...

PT-2023-23370

Name of the Vulnerable Software and Affected Versions teeworlds version 0.7.5 Description A heap use-after-free issue in the CDataFileReader::GetItem component allows attackers to cause a Denial of Service DoS via a crafted map file. Recommendations For teeworlds version 0.7.5, consider avoiding...

CVE-2023-31518

The CVE-2023-31518 entry concerns teeworlds v0.7.5, where a heap use-after-free in CDataFileReader::GetItem can be triggered by a crafted map file to cause a Denial of Service. The connected sources confirm the affected component and failure mode but do not provide patch details or fixed versions...

CVE-2023-31518: Use After Free

A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via a crafted map file...

CVE-2023-31517: Missing Release of Memory after Effective Lifetime

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

CVE-2023-31517

A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service DoS via opening a crafted file...

PT-2023-23369 · Teeworlds +1 · Teeworlds +1

Name of the Vulnerable Software and Affected Versions: Teeworlds version 0.7.5 Description: A memory leak in the component CConsole::Chain allows attackers to cause a Denial of Service DoS via opening a crafted file. This issue affects Teeworlds, potentially allowing for service disruption...

Buffer Overflow

teeworlds is vulnerable to Buffer Overflow. A malicious attacker may craft a specific map which will overwrite client data since 'mchannels' values coming from a map file are not validated by a map parser. This could lead to denial of service or code execution...

SUSE CVE-2014-9351

engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service crash via unspecified vectors...

SUSE CVE-2016-9400

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling...

SUSE CVE-2018-18541

In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download...

SUSE CVE-2019-10877

In Teeworlds 0.7.2, there is an integer overflow in CMap::Load in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled...

SUSE CVE-2019-10879

In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled...

SUSE CVE-2019-10878

In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData and CDataFileReader::ReplaceData and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution...

SUSE CVE-2019-20787

Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size...

SUSE CVE-2020-12066

CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server...

SUSE CVE-2021-43518

Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate mChannels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code...