CVE-2019-10878
Fixed in a distro release EPSS 4%
In Teeworlds 0.7.2, there is a failed bounds check in CDataFileReader::GetData() and CDataFileReader::ReplaceData() and related functions in engine/shared/datafile.cpp that can lead to an arbitrary free and out-of-bounds pointer write, possibly resulting in remote code execution.
Products: teeworlds
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | teeworlds | 0.7.2-5 |
| Debian 13 | teeworlds | 0.7.2-5 |
| Debian 14 | teeworlds | 0.7.2-5 |
| SUSE Package Hub 15 SP1 | teeworlds | 0.7.3.1-bp151.2.3.3 |
| Ubuntu 16.04 LTS | teeworlds | no fix |
| Ubuntu 18.04 LTS | teeworlds | no fix |
| Ubuntu 20.04 LTS | teeworlds | 0.7.2-5 |
| openSUSE Leap 15.1 | teeworlds | 0.7.3.1-lp151.2.3.1 |