Low severity3.9NVD Advisory· Published Mar 10, 2020· Updated Jun 17, 2026

CVE-2020-5253

Description

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Nethack/Nethackllm-fuzzy2 versions
<3.6.0+ 1 more
- (no CPE)range: <3.6.0
- (no CPE)range: < 3.6.0
osv-coords
pkg:rpm/opensuse/nethack&distro=openSUSE%20Tumbleweed
Range: < 3.4.3-6.1

Patches

Vulnerability mechanics

References

github.com/NetHack/NetHack/commits/612755bfb5c412079795c68ba392df5d93874ed8nvdPatchThird Party Advisory
github.com/NetHack/NetHack/security/advisories/GHSA-2c7p-3fj4-223mnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.254
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000