CVE-2016-9400
Fixed in a distro release EPSS 4%
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
Products: teeworlds, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | teeworlds | 0.6.4+dfsg-1 |
| Debian 13 | teeworlds | 0.6.4+dfsg-1 |
| Debian 14 | teeworlds | 0.6.4+dfsg-1 |
| Ubuntu 16.04 LTS | teeworlds | no fix |