CVE-2020-14938
Description
An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Mitigation details
CVE-2020-14938 NameCVE-2020-14938 DescriptionAn issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow. SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE…
CVE-2020-14938
| Name | CVE-2020-14938 |
| Description | An issue was discovered in map.c in FreedroidRPG 1.0rc2. It assumes lengths of data sets read from saved game files. It copies data from a file into a fixed-size heap-allocated buffer without size verification, leading to a heap-based buffer overflow. |
| Source | CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| Debian Bugs | 964197 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|---|---|---|
| freedroidrpg (PTS) | bullseye | 0.16.1-6 | vulnerable |
| bookworm | 1.0-1 | fixed | |
| sid | 1.0+ds-1 | fixed |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|---|---|---|---|---|---|
| freedroidrpg | source | jessie | (unfixed) | end-of-life | ||
| freedroidrpg | source | (unstable) | 1.0-1 | low | 964197 |
Notes
[bullseye] - freedroidrpg <no-dsa> (Minor issue)
[buster] - freedroidrpg <no-dsa> (Minor issue)
[stretch] - freedroidrpg <no-dsa> (Minor issue)
[jessie] - freedroidrpg <end-of-life> (games are not supported)
https://bugs.freedroid.org/b/issue952
https://bugs.freedroid.org/b/issue967
https://logicaltrust.net/blog/2020/02/freedroid.html
Apply commands
[bullseye] - freedroidrpg <no-dsa> (Minor issue)[buster] - freedroidrpg <no-dsa> (Minor issue)[stretch] - freedroidrpg <no-dsa> (Minor issue)[jessie] - freedroidrpg <end-of-life> (games are not supported)https://bugs.freedroid.org/b/issue952https://bugs.freedroid.org/b/issue967https://logicaltrust.net/blog/2020/02/freedroid.htmlOS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bookworm | fixed | 1.0-1 |
| debian | bullseye | affected | |
| debian | sid | fixed | 1.0-1 |
References
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.