Debian: Security Advisory (DSA-1737-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0878

The readgamemap function in src/terraintranslation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service memory consumption and daemon hang via a map with a large 1 width or 2 height...

CVE-2009-0366

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

CVE-2009-0366

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

CVE-2009-0878

The readgamemap function in src/terraintranslation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service memory consumption and daemon hang via a map with a large 1 width or 2 height...

Code injection

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

CVE-2009-0878

The CVE-2009-0878 entry concerns Wesnoth and a vulnerability in the read_game_map function (src/terrain_translation.cpp) that exists before revision r32987. A remote attacker can trigger a denial of service by exploiting maps with an abnormally large width or height, leading to memory consumption...

CVE-2009-0366

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

CVE-2009-0366

CVE-2009-0366 - Wesnoth DoS via crafted compressed data . The uncompress_buffer function in src/server/simple_wml.cpp is vulnerable in Wesnoth before revision r33069, allowing remote attackers to cause denial of service by sending a large compressed WML document. Exploitation is network-based and...

wesnoth game multiple security vulnerabilities

DoS, code execution...

Debian DSA-1737-1 : wesnoth - several vulnerabilities

Several security issues have been discovered in wesnoth, a fantasy turn-based strategy game. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0366 Daniel Franke discovered that the wesnoth server is prone to a denial of service attack when receiving...

CVE-2009-0366: Undefined Security Weakness

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

CVE-2009-0878: Undefined Security Weakness

The readgamemap function in src/terraintranslation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service memory consumption and daemon hang via a map with a large 1 width or 2 height...

[SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1737-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1737-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 11, 2009 http://www.debian.org/security/faq -...

DSA-1737-1 wesnoth - several vulnerabilities

Bulletin has no description...

CVE-2009-0367

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

Code injection

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

CVE-2009-0367

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

CVE-2009-0367

The CVE-2009-0367 vulnerability affects Wesnoth’s Python AI module (Wesnoth 1.4.x and 1.5 before 1.5.11). A remote attacker can escape the sandbox and run arbitrary Python code by using a whitelisted module that imports an unsafe module, then accessing it via a hierarchical module name through th...