CVE-2015-0844: Infoleak
Published Apr 14, 2015
·Updated
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.
Affected Software
58 affected components
Wesnoth Battle for Wesnoth=1.7.0
Wesnoth Battle for Wesnoth=1.7.1
Wesnoth Battle for Wesnoth=1.7.2
Wesnoth Battle for Wesnoth=1.7.3
Wesnoth Battle for Wesnoth=1.7.4
Wesnoth Battle for Wesnoth=1.7.5
Wesnoth Battle for Wesnoth=1.7.6
Wesnoth Battle for Wesnoth=1.7.7
Wesnoth Battle for Wesnoth=1.7.8-beta1
Wesnoth Battle for Wesnoth=1.7.9-beta2
Wesnoth Battle for Wesnoth=1.7.10-1.8-beta3
Wesnoth Battle for Wesnoth=1.7.11-1.8-beta4
Wesnoth Battle for Wesnoth=1.7.12-1.8-beta5
Wesnoth Battle for Wesnoth=1.7.13-1.8-beta6
Wesnoth Battle for Wesnoth=1.7.14-1.8-beta7
Wesnoth Battle for Wesnoth=1.7.15-1.8-rc1
Wesnoth Battle for Wesnoth=1.8.0
Wesnoth Battle for Wesnoth=1.9.0
Wesnoth Battle for Wesnoth=1.9.1
Wesnoth Battle for Wesnoth=1.9.2
Wesnoth Battle for Wesnoth=1.9.3
Wesnoth Battle for Wesnoth=1.9.4
Wesnoth Battle for Wesnoth=1.9.5
Wesnoth Battle for Wesnoth=1.9.6
Wesnoth Battle for Wesnoth=1.9.7
Wesnoth Battle for Wesnoth=1.9.8
Wesnoth Battle for Wesnoth=1.9.9
Wesnoth Battle for Wesnoth=1.9.10
Wesnoth Battle for Wesnoth=1.9.11
Wesnoth Battle for Wesnoth=1.9.12
Wesnoth Battle for Wesnoth=1.9.13
Wesnoth Battle for Wesnoth=1.9.14
Wesnoth Battle for Wesnoth=1.10.0
Wesnoth Battle for Wesnoth=1.11.0
Wesnoth Battle for Wesnoth=1.11.1
Wesnoth Battle for Wesnoth=1.11.2
Wesnoth Battle for Wesnoth=1.11.3
Wesnoth Battle for Wesnoth=1.11.4
Wesnoth Battle for Wesnoth=1.11.5
Wesnoth Battle for Wesnoth=1.11.6
Wesnoth Battle for Wesnoth=1.11.7
Wesnoth Battle for Wesnoth=1.11.8
Wesnoth Battle for Wesnoth=1.11.9
Wesnoth Battle for Wesnoth=1.11.10
Wesnoth Battle for Wesnoth=1.11.11
Wesnoth Battle for Wesnoth=1.11.12
Wesnoth Battle for Wesnoth=1.11.13
Wesnoth Battle for Wesnoth=1.11.14
Wesnoth Battle for Wesnoth=1.11.15
Wesnoth Battle for Wesnoth=1.11.16
Wesnoth Battle for Wesnoth=1.11.17
Wesnoth Battle for Wesnoth=1.11.18
Wesnoth Battle for Wesnoth=1.11.19
Wesnoth Battle for Wesnoth=1.12.0
Wesnoth Battle for Wesnoth=1.12.1
Fedoraproject Fedora=20
Fedoraproject Fedora=21
Fedoraproject Fedora=22
Event History
Apr 14, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0844?
CVE-2015-0844 is considered a moderate severity vulnerability as it allows attackers to read arbitrary files on the server.
2
How do I fix CVE-2015-0844?
To fix CVE-2015-0844, upgrade to Battle for Wesnoth version 1.12.2 or later.
3
What versions are affected by CVE-2015-0844?
Versions of Battle for Wesnoth from 1.7.x through 1.12.x before 1.12.2 are affected by CVE-2015-0844.
4
What type of attacks can be executed using CVE-2015-0844?
CVE-2015-0844 allows remote attackers to execute file reading attacks by crafting malicious campaign or map files.
5
Is there a patch available for CVE-2015-0844?
Yes, a patch is included in Battle for Wesnoth version 1.12.2 and later to address CVE-2015-0844.