CVE-2021-43518
published 2021-12-15CVE-2021-43518: Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a…
PriorityP337high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
1.38%
69.4th percentile
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | teeworlds | < teeworlds 0.7.5-2 (bookworm) | teeworlds 0.7.5-2 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| teeworlds | teeworlds | <= 0.7.5 | — |
| teeworlds | teeworlds | >= 0 < 0.7.5-2 | 0.7.5-2 |
| teeworlds | teeworlds | >= 0 < 0.7.5-2 | 0.7.5-2 |
| teeworlds | teeworlds | >= 0 < 0.7.5-2 | 0.7.5-2 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv7.8HIGH
vendor_debian7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-53xw-cwmg-3m36: Teeworlds up to and including 0
ghsa_unreviewed·2021-12-16
CVE-2021-43518 [HIGH] CWE-120 GHSA-53xw-cwmg-3m36: Teeworlds up to and including 0
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.
OSV
CVE-2021-43518: Teeworlds up to and including 0
osv·2021-12-15·CVSS 7.8
CVE-2021-43518 [HIGH] CVE-2021-43518: Teeworlds up to and including 0
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.
Debian
CVE-2021-43518: teeworlds - Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map pars...
vendor_debian·2021·CVSS 7.8
CVE-2021-43518 [HIGH] CVE-2021-43518: teeworlds - Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map pars...
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.
Scope: local
bookworm: resolved (fixed in 0.7.5-2)
bullseye: open
forky: resolved (fixed in 0.7.5-2)
sid: resolved (fixed in 0.7.5-2)
trixie: resolved (fixed in 0.7.5-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/teeworlds/teeworlds/issues/2981https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/https://github.com/teeworlds/teeworlds/issues/2981https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/
2021-12-15
Published