mageia

Updated nethack packages fix security vulnerabilities

Updated nethack packages fix security vulnerabilities: NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own...

7.5 CVSS

2021-02-10T18:41:52

fedora

[SECURITY] Fedora 31 Update: nethack-3.6.6-1.fc31

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

2020-03-19T01:45:26

fedora

[SECURITY] Fedora 30 Update: nethack-3.6.6-1.fc30

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

2020-03-19T01:24:17

fedora

[SECURITY] Fedora 32 Update: nethack-3.6.6-1.fc32

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

2020-03-19T00:50:34

debiancve

CVE-2020-5253

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack...

7.5 CVSS

2020-03-10T17:15:00

debiancve

CVE-2020-5254

In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this...

6.8 CVSS

2020-03-10T17:15:00

ubuntucve

CVE-2020-5254

In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue. Notes Author| Note ---|--- debian | Vulnerable code introduced in...

6.8 CVSS

2020-03-10T00:00:00

ubuntucve

CVE-2020-5253

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack...

7.5 CVSS

2020-03-10T00:00:00

fedora

[SECURITY] Fedora 31 Update: nethack-3.6.5-1.fc31

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

2020-02-08T02:04:22

fedora

[SECURITY] Fedora 30 Update: nethack-3.6.5-1.fc30

NetHack is a single player dungeon exploration game that runs on a wide variety of computer systems, with a variety of graphical and text interfaces all using the same game engine. Unlike many other Dungeons & Dragons-inspired games, the emphasis in NetHack is on discovering the detail of the...

2020-02-08T01:39:37

debiancve

CVE-2020-5211

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

7.5 CVSS

2020-01-28T19:15:00

debiancve

CVE-2020-5210

In NetHack before 3.6.5, an invalid argument to the -w command line option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence...

4.6 CVSS

2020-01-28T18:15:00

debiancve

CVE-2020-5214

In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own...

7.5 CVSS

2020-01-28T18:15:00

debiancve

CVE-2020-5212

In NetHack before 3.6.5, an extremely long value for the MENUCOLOR configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users...

7.5 CVSS

2020-01-28T18:15:00

debiancve

CVE-2020-5213

In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to...

7.5 CVSS

2020-01-28T18:15:00

debiancve

CVE-2020-5209

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line...

4.6 CVSS

2020-01-28T18:15:00

ubuntucve

CVE-2020-5211

In NetHack before 3.6.5, an invalid extended command in value for the AUTOCOMPLETE configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems...

7.5 CVSS

2020-01-28T00:00:00

ubuntucve

CVE-2020-5213

In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to...

7.5 CVSS

2020-01-28T00:00:00

ubuntucve

CVE-2020-5214

In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own...

7.5 CVSS

2020-01-28T00:00:00

ubuntucve

CVE-2020-5209

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line...

4.6 CVSS

2020-01-28T00:00:00

affectedPackage.packageName:"nethack"

Updated nethack packages fix security vulnerabilities

[SECURITY] Fedora 31 Update: nethack-3.6.6-1.fc31

[SECURITY] Fedora 30 Update: nethack-3.6.6-1.fc30

[SECURITY] Fedora 32 Update: nethack-3.6.6-1.fc32

CVE-2020-5253

CVE-2020-5254

CVE-2020-5254

CVE-2020-5253

[SECURITY] Fedora 31 Update: nethack-3.6.5-1.fc31

[SECURITY] Fedora 30 Update: nethack-3.6.5-1.fc30

CVE-2020-5211

CVE-2020-5210

CVE-2020-5214

CVE-2020-5212

CVE-2020-5213

CVE-2020-5209

CVE-2020-5211

CVE-2020-5213

CVE-2020-5214

CVE-2020-5209