Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:39767
HistoryMar 14, 2023 - 6:34 a.m.

Denial Of Service (DoS)

2023-03-1406:34:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
denial of service
nethack
vulnerability
input
application crash
shared systems

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%

nethack is vulnerable to Denial Of Service (DoS). The vulnerability exists in the NetHack installed suid/sgid and shared systems, which allows an attacker to provide malicious input to the “C” (call) command, leading to an applicacion crash

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

9.1%