Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2006-1100 | 1 Sauerbraten | 2 Cube, Sauerbraten | 2024-02-28 | 7.5 HIGH | N/A |
| Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data. | |||||
| CVE-2006-1101 | 1 Sauerbraten | 2 Cube, Sauerbraten | 2024-02-28 | 5.0 MEDIUM | N/A |
| The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint. | |||||
| CVE-2006-1103 | 1 Sauerbraten | 2 Cube, Sauerbraten | 2024-02-28 | 5.0 MEDIUM | N/A |
| engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference. | |||||
| CVE-2006-1102 | 1 Sauerbraten | 2 Cube, Sauerbraten | 2024-02-28 | 5.0 MEDIUM | N/A |
| Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension. | |||||