CVE-2018-18541
Fixed in a distro release EPSS 3%
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
Products: teeworlds, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | teeworlds | 0.7.0-1 |
| Debian 13 | teeworlds | 0.7.0-1 |
| Debian 14 | teeworlds | 0.7.0-1 |
| Debian 9 | teeworlds | 0.6.5+dfsg-1~deb9u1 |
| SUSE Package Hub 15 SP1 | teeworlds | 0.7.3.1-bp151.2.3.3 |
| Ubuntu 16.04 LTS | teeworlds | no fix |
| Ubuntu 18.04 LTS | teeworlds | no fix |
| openSUSE Leap 15.1 | teeworlds | 0.7.3.1-lp151.2.3.1 |