Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 530284 - <games-action/teeworlds-0.6.3: invalid read (CVE-2014-9351)
Summary: <games-action/teeworlds-0.6.3: invalid read (CVE-2014-9351)
Status: RESOLVED OBSOLETE
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo Security
URL: https://bugzilla.redhat.com/show_bug....
Whiteboard: ~3 [noglsa]
Keywords:
Depends on:
Blocks:
 
Reported: 2014-11-24 08:40 UTC by Agostino Sarubbo
Modified: 2016-02-26 13:57 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Agostino Sarubbo gentoo-dev 2014-11-24 08:40:08 UTC
From ${URL} :

The 0.6.3 release of Teeworlds, an online multi-player platform 2D shooter, fixes an invalid read 
issue. This could be used to leak memory to a remote attacker, or possibly cause a crash:

https://www.teeworlds.com/?page=news&id=11200

Upstream fix:

https://github.com/teeworlds/teeworlds/commit/a766cb44bcffcdb0b88e776d01c5ee1323d44f85

References:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770514


@maintainer(s): since the package or the affected version has never been marked as stable, we don't need to stabilize it. After the bump, please remove the affected versions from the tree.
Comment 1 GLSAMaker/CVETool Bot gentoo-dev 2015-01-04 21:47:20 UTC
CVE-2014-9351 (http://nvd.nist.gov/nvd.cfm?cvename=CVE-2014-9351):
  engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote
  attackers to read memory and cause a denial of service (crash) via
  unspecified vectors.
Comment 2 Aaron Bauman (RETIRED) gentoo-dev 2016-02-26 13:57:43 UTC
games-action/teeworlds-0.6.3 is in tree.  No vulnerable versions present.  GLSA Vote: No