Vulnerability Details CVE-2021-43518
Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 35.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
References
- https://github.com/teeworlds/teeworlds/issues/2981
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/
- https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/
- https://github.com/teeworlds/teeworlds/issues/2981
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/
- https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/
Products affected by CVE-2021-43518
-
cpe:2.3:a:teeworlds:teeworlds:0.4.3
-
cpe:2.3:a:teeworlds:teeworlds:0.5.2
-
cpe:2.3:a:teeworlds:teeworlds:0.6.4
-
cpe:2.3:a:teeworlds:teeworlds:0.6.5
-
cpe:2.3:a:teeworlds:teeworlds:0.7.0
-
cpe:2.3:a:teeworlds:teeworlds:0.7.1
-
cpe:2.3:a:teeworlds:teeworlds:0.7.2
-
cpe:2.3:a:teeworlds:teeworlds:0.7.3
-
cpe:2.3:a:teeworlds:teeworlds:0.7.3.1
-
cpe:2.3:a:teeworlds:teeworlds:0.7.4
-
cpe:2.3:a:teeworlds:teeworlds:0.7.5
-
cpe:2.3:o:fedoraproject:fedora:35
-
cpe:2.3:o:fedoraproject:fedora:36