CVE-2022-35978-POC

CVE-2022-35978 概念验证 PoC 描述 CVE-2022-35978 是一个影响 Minetest 5.5.1 及之前版本的严重安全漏洞。 Minetest 是一款免费、开源的体素游戏引擎，支持简单的模组制作和游戏创建。在单人游戏模式下，模组可以设置一个全局配置，该配置控制加载用于显示主菜单的 Lua 脚本。当游戏会话退出后，这个脚本会被立即加载。主菜单运行所在的 Lua 环境没有沙箱保护，从而允许它直接干扰用户的系统。 为了缓解此问题，建议用户将 Minetest 更新到已修复该漏洞的 5.6.0 或更高版本。 此漏洞被 NVD 分配了 CVSS v3.1 基础评分...

[SECURITY] Fedora 44 Update: minetest-5.15.2-1.fc44

Game of mining, crafting and building in the infinite world of cubic blocks w ith optional hostile creatures, features both single and the network multiplayer mode, mods. Public multiplayer servers are available...

[SECURITY] Fedora 43 Update: minetest-5.15.2-1.fc43

Game of mining, crafting and building in the infinite world of cubic blocks w ith optional hostile creatures, features both single and the network multiplayer mode, mods. Public multiplayer servers are available...

[SECURITY] Fedora 43 Update: tuxanci-0.21.0-27.fc43

Tuxanci is a first Tux shooter game supporting single player and multi-player modes both on a single computer and over the network...

CVE-2023-24809

NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the "C" call command can cause a buffer overflow and crash the NetHack process. This vulnerability may be a security issue for systems that have NetHack installed suid/sgi...

SUSE CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

MGASA-2023-0005 Updated minetest packages fix security vulnerability

This update provides minetest 5.6.1, the latest stable release of the open source voxel game. This updates provides a number of feature and bug fix changes compared to the previous version 5.4.0 provided in Mageia 8. See the linked release notes and changelogs for details. The update also improve...

Denial Of Service (DoS)

minetest is vulnerable to Denial Of Service DoS. An attacker can crash the application by providing a malicious script as the library sets the global setting that controls the luna script while in single player mode...

DEBIAN-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

Design/Logic Flaw

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

UBUNTU-CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

CVE-2022-35978 Lua sandbox escape from mod in Minetest

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

CVE-2022-35978

Minetest is a free open-source voxel game engine with easy modding and game creation. In single player, a mod can set a global setting that controls the Lua script loaded to display the main menu. The script is then loaded as soon as the game session is exited. The Lua environment the menu runs i...

Minetest 安全漏洞

Minetest is a free open source voxel game engine by The Minetest Team team. It is used for module and game creation. A security vulnerability exists in Minetest 5.5.1 and earlier versions, which originates in single player, where a module can set a global setting to control a Lua script that is...

[SECURITY] Fedora 31 Update: nethack-3.6.6-1.fc31

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

Fedora: Security Advisory for nethack (FEDORA-2020-4c3d74204a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for nethack (FEDORA-2020-16268b450d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: nethack-3.6.5-1.fc31

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

[SECURITY] Fedora 30 Update: nethack-3.6.5-1.fc30

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...