Teeworlds
by Teeworlds
Source repositories
CVEs (11)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2016-9400 | Cri | 0.64 | 9.8 | 0.04 | Feb 22, 2017 | The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling. | ||
| CVE-2023-31517 | 0.00 | — | 0.01 | May 23, 2023 | A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file. | |||
| CVE-2023-31518 | 0.00 | — | 0.00 | May 23, 2023 | A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file. | |||
| CVE-2021-43518 | 0.00 | — | 0.01 | Dec 15, 2021 | Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of… | |||
| CVE-2020-12066 | 0.00 | — | 0.03 | Apr 22, 2020 | CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server. | |||
| CVE-2019-20787 | 0.00 | — | 0.02 | Apr 22, 2020 | Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size. | |||
| CVE-2019-10879 | 0.00 | — | 0.05 | Apr 5, 2019 | In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled. | |||
| CVE-2019-10878 | 0.00 | — | 0.04 | Apr 5, 2019 | In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution. | |||
| CVE-2019-10877 | 0.00 | — | 0.02 | Apr 5, 2019 | In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled. | |||
| CVE-2018-18541 | 0.00 | — | 0.03 | Oct 20, 2018 | In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack… | |||
| CVE-2014-9351 | 0.00 | — | 0.03 | Dec 9, 2014 | engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via unspecified vectors. |
- risk 0.64cvss 9.8epss 0.04
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
- CVE-2023-31517May 23, 2023risk 0.00cvss —epss 0.01
A memory leak in the component CConsole::Chain of Teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via opening a crafted file.
- CVE-2023-31518May 23, 2023risk 0.00cvss —epss 0.00
A heap use-after-free in the component CDataFileReader::GetItem of teeworlds v0.7.5 allows attackers to cause a Denial of Service (DoS) via a crafted map file.
- CVE-2021-43518Dec 15, 2021risk 0.00cvss —epss 0.01
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of…
- CVE-2020-12066Apr 22, 2020risk 0.00cvss —epss 0.03
CServer::SendMsg in engine/server/server.cpp in Teeworlds 0.7.x before 0.7.5 allows remote attackers to shut down the server.
- CVE-2019-20787Apr 22, 2020risk 0.00cvss —epss 0.02
Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
- CVE-2019-10879Apr 5, 2019risk 0.00cvss —epss 0.05
In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled.
- CVE-2019-10878Apr 5, 2019risk 0.00cvss —epss 0.04
In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution.
- CVE-2019-10877Apr 5, 2019risk 0.00cvss —epss 0.02
In Teeworlds 0.7.2, there is an integer overflow in CMap::Load() in engine/shared/map.cpp that can lead to a buffer overflow, because multiplication of width and height is mishandled.
- CVE-2018-18541Oct 20, 2018risk 0.00cvss —epss 0.03
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack…
- CVE-2014-9351Dec 9, 2014risk 0.00cvss —epss 0.03
engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via unspecified vectors.