Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2020-5214 →
DEBIAN-CVE-2020-5214
In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/priv...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
nethack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1"}]}]
Debian:13
nethack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1"}]}]
Debian:14
nethack
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.6-1"}]}]
Références
- advisory security-tracker.debian.org