SB2020020502 - Multiple vulnerabilities in NetHack

Main Vulnerability Database SB2020020502

SB2020020502 - Multiple vulnerabilities in NetHack

Published: February 5, 2020

Security Bulletin ID SB2020020502

Severity

High

Patch available

YES

Number of vulnerabilities 6

Exploitation vector Remote access

Highest impact Code execution

Breakdown by Severity

Low
Medium
High
Critical

Description

This security bulletin contains information about 6 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2020-5214)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when detecting an unknown configuration file option. A remote attacker can trigger memory corruption, cause a denial of service (DoS) condition or execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note: This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files.

2) Buffer overflow (CVE-ID: CVE-2020-5213)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in an extremely long value for the SYMBOL configuration file options. A remote attacker can trigger memory corruption, cause a denial of service (DoS) condition or execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note: This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files.

3) Buffer overflow (CVE-ID: CVE-2020-5212)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in an extremely long value for the MENUCOLOR configuration file option. A remote attacker can trigger memory corruption, cause a denial of service (DoS) condition or execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note: This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files.

4) Buffer overflow (CVE-ID: CVE-2020-5210)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in an invalid argument to the -w command line option. A remote attacker can trigger memory corruption, cause a denial of service (DoS) condition or execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note: This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line options.

5) Buffer overflow (CVE-ID: CVE-2020-5209)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error when unknown options starting with -de and -i. A remote attacker can trigger memory corruption and cause a denial of service (DoS) condition or execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note: This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line options.

6) Buffer overflow (CVE-ID: CVE-2020-5211)

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in an invalid extended command in value for the AUTOCOMPLETE configuration file option. A remote attacker can trigger memory corruption, cause a denial of service (DoS) condition or execute arbitrary code on the target system with elevated privileges.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Note: This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files.

Remediation

Install update from vendor's website.

References