Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-24809
HistoryFeb 17, 2023 - 12:00 a.m.

CVE-2023-24809

2023-02-1700:00:00
ubuntu.com
ubuntu.com
7
nethack
buffer overflow
vulnerability
fix
unix

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

NetHack is a single player dungeon exploration game. Starting with version
3.6.2 and prior to version 3.6.7, illegal input to the “C” (call) command
can cause a buffer overflow and crash the NetHack process. This
vulnerability may be a security issue for systems that have NetHack
installed suid/sgid and for shared systems. For all systems, it may result
in a process crash. This issue is resolved in NetHack 3.6.7. There are no
known workarounds.

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%