ID:3551 - Exploit for Buffer overflow in NetHack - CVE-2020-5254

 
Main Vulnerability Database Exploits ID:3551 - Exploit for Buffer overflow in NetHack - CVE-2020-5254

ID:3551 - Exploit for Buffer overflow in NetHack - CVE-2020-5254

Published: July 20, 2020


Vulnerability identifier: #VU30335
Vulnerability risk: High
CVE-ID: CVE-2020-5254
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
NetHack

Link to public exploit:


Vulnerability description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.


Remediation

Install update from vendor's website.