rpm package
opensuse/teeworlds&distro=openSUSE Leap 15.1
pkg:rpm/opensuse/teeworlds&distro=openSUSE%20Leap%2015.1
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-12066 | — | < 0.7.5-lp151.2.6.1 | 0.7.5-lp151.2.6.1 | Apr 22, 2020 | CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. | ||
| CVE-2019-20787 | — | < 0.7.5-lp151.2.6.1 | 0.7.5-lp151.2.6.1 | Apr 22, 2020 | Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. | ||
| CVE-2019-10879 | — | < 0.7.3.1-lp151.2.3.1 | 0.7.3.1-lp151.2.3.1 | Apr 5, 2019 | In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled. | ||
| CVE-2019-10878 | — | < 0.7.3.1-lp151.2.3.1 | 0.7.3.1-lp151.2.3.1 | Apr 5, 2019 | In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution. | ||
| CVE-2019-10877 | — | < 0.7.3.1-lp151.2.3.1 | 0.7.3.1-lp151.2.3.1 | Apr 5, 2019 | In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled. | ||
| CVE-2018-18541 | — | < 0.7.3.1-lp151.2.3.1 | 0.7.3.1-lp151.2.3.1 | Oct 20, 2018 | In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack usin |
- CVE-2020-12066Apr 22, 2020affected < 0.7.5-lp151.2.6.1fixed 0.7.5-lp151.2.6.1
CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.
- CVE-2019-20787Apr 22, 2020affected < 0.7.5-lp151.2.6.1fixed 0.7.5-lp151.2.6.1
Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
- CVE-2019-10879Apr 5, 2019affected < 0.7.3.1-lp151.2.3.1fixed 0.7.3.1-lp151.2.3.1
In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled.
- CVE-2019-10878Apr 5, 2019affected < 0.7.3.1-lp151.2.3.1fixed 0.7.3.1-lp151.2.3.1
In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution.
- CVE-2019-10877Apr 5, 2019affected < 0.7.3.1-lp151.2.3.1fixed 0.7.3.1-lp151.2.3.1
In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled.
- CVE-2018-18541Oct 20, 2018affected < 0.7.3.1-lp151.2.3.1fixed 0.7.3.1-lp151.2.3.1
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack usin