CVE-2019-10879
Fixed in a distro release EPSS 5%
In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled.
Products: teeworlds
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | teeworlds | 0.7.2-4 |
| Debian 13 | teeworlds | 0.7.2-4 |
| Debian 14 | teeworlds | 0.7.2-4 |
| SUSE Package Hub 15 SP1 | teeworlds | 0.7.3.1-bp151.2.3.3 |
| Ubuntu 16.04 LTS | teeworlds | no fix |
| Ubuntu 18.04 LTS | teeworlds | no fix |
| Ubuntu 20.04 LTS | teeworlds | 0.7.2-5 |
| openSUSE Leap 15.1 | teeworlds | 0.7.3.1-lp151.2.3.1 |