CVE-2020-5209
NetHack command line parsing of options starting with -de and -i is subject to a buffer overflow
Vexday Risk Score
13Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 5EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
28 jan 2020Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line options. Users should upgrade to NetHack 3.6.5.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
NetHack · NetHackQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →