Vulnerabilities (CVE)

Filtered by vendor Id Software Subscribe
Total 27 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1080 2 Id Software, J. P. Grossman 2 Quake, Proquake 2024-11-20 5.0 MEDIUM N/A
Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
CVE-2000-0303 1 Id Software 1 Quake 3 Arena 2024-11-20 6.4 MEDIUM N/A
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
CVE-1999-1569 1 Id Software 1 Quake 2024-11-20 5.0 MEDIUM N/A
Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which exceeds the server's player limit.
CVE-1999-1505 1 Id Software 1 Quakeworld 2024-11-20 7.5 HIGH N/A
Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet.
CVE-1999-1502 1 Id Software 1 Quake 2024-11-20 7.5 HIGH N/A
Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
CVE-1999-1230 1 Id Software 1 Quake 2 2024-11-20 5.0 MEDIUM N/A
Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to itself.
CVE-1999-1229 1 Id Software 1 Quake 2 Server 2024-11-20 2.1 LOW N/A
Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from config.cfg to the target file.