CVE-2018-1999023: Code Injection

Q: What is the severity of CVE-2018-1999023?

CVE-2018-1999023 has a severity rating that indicates a significant risk of code execution outside the sandbox.

Q: How do I fix CVE-2018-1999023?

To fix CVE-2018-1999023, update The Battle for Wesnoth to the latest version beyond 1.14.3.

Q: Who is affected by CVE-2018-1999023?

CVE-2018-1999023 affects users of The Battle for Wesnoth versions 1.7.0 through 1.14.3.

Q: What type of vulnerability is CVE-2018-1999023?

CVE-2018-1999023 is a code injection vulnerability in the Lua scripting engine.

Q: How can CVE-2018-1999023 be exploited?

CVE-2018-1999023 can be exploited by loading specially-crafted saved games, networked games, or replays.

Published Jul 23, 2018

Updated

The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content.

Affected Software

1 affected component

Wesnoth The Battle for Wesnoth>=1.7.0<=1.14.3

Remediation

Patch Available

https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380

Event History

Jul 23, 2018

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-1999023?

CVE-2018-1999023 has a severity rating that indicates a significant risk of code execution outside the sandbox.

How do I fix CVE-2018-1999023?