Fedora 31 : gnuchess (2020-dbccd7e9be)

6.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

Fedora 30 : gnuchess (2020-3eaf264c4b)

6.2.6 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network Security, Inc. The...

CVE-2015-8972

GNU Chess (gnuchess) is vulnerable to a stack-based buffer overflow in the ValidateMove function (frontend/move.cc) present in version 6.2.3 and earlier; a large input can allow context-dependent attackers to execute arbitrary code, notably when running in UCI mode. Public sources consistently st...

openSUSE Security Update : gnuchess (openSUSE-2016-1352)

This update for gnuchess fixes a security issue : - CVE-2015-8972: specially crafted user input may have caused gnuchess to crash boo1010143 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Updated gnuchess packages fix security vulnerability

gnuchess before 6.2.4 is vulnerable to a stack buffer overflow related to user move input, where 160 characters of input can crash gnuchess CVE-2015-8972...

CVE-2002-0204

CVE-2002-0204 : Buffer overflow in GNU Chess (gnuchess) 5.02 and earlier. When modified or used in a networked capacity contrary to its single‑user design, it may allow local or remote attackers to execute arbitrary code via a long command. The vulnerability is described in the NVD entry; no fixe...