What is the severity of CVE-2018-1999023?

CVE-2018-1999023 has a severity rating that indicates a significant risk of code execution outside the sandbox.

How do I fix CVE-2018-1999023?

To fix CVE-2018-1999023, update The Battle for Wesnoth to the latest version beyond 1.14.3.

Who is affected by CVE-2018-1999023?

CVE-2018-1999023 affects users of The Battle for Wesnoth versions 1.7.0 through 1.14.3.

What type of vulnerability is CVE-2018-1999023?

CVE-2018-1999023 is a code injection vulnerability in the Lua scripting engine.

How can CVE-2018-1999023 be exploited?

CVE-2018-1999023 can be exploited by loading specially-crafted saved games, networked games, or replays.

Vulnerability/
CVE-2018-1999023

high

8.8

CWE

23/7/2018

3/10/2022

5/8/2024

CVE-2018-1999023: Code Injection

First published: Mon Jul 23 2018(Updated: )

The Battle for Wesnoth Project version 1.7.0 through 1.14.3 contains a Code Injection vulnerability in the Lua scripting engine that can result in code execution outside the sandbox. This attack appear to be exploitable via Loading specially-crafted saved games, networked games, replays, and player content.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Wesnoth The Battle for Wesnoth	>=1.7.0<=1.14.3

Remedy

https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380

Never miss a vulnerability like this again

Reference Links

https://gist.github.com/shikadiqueen/45951ddc981cf8e0d9a74e4b30400380

Frequently Asked Questions

What is the severity of CVE-2018-1999023?
CVE-2018-1999023 has a severity rating that indicates a significant risk of code execution outside the sandbox.
How do I fix CVE-2018-1999023?
To fix CVE-2018-1999023, update The Battle for Wesnoth to the latest version beyond 1.14.3.
Who is affected by CVE-2018-1999023?
CVE-2018-1999023 affects users of The Battle for Wesnoth versions 1.7.0 through 1.14.3.
What type of vulnerability is CVE-2018-1999023?
CVE-2018-1999023 is a code injection vulnerability in the Lua scripting engine.
How can CVE-2018-1999023 be exploited?
CVE-2018-1999023 can be exploited by loading specially-crafted saved games, networked games, or replays.

agent/type
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/remedy
agent/severity
agent/references
agent/author
agent/last-modified-date
agent/description
agent/event
agent/source
agent/weakness
agent/tags
agent/softwarecombine
collector/nvd-index
agent/software-canonical-lookup-request
vendor/wesnoth
canonical/wesnoth the battle for wesnoth
version/wesnoth the battle for wesnoth/1.7.0
version/wesnoth the battle for wesnoth/1.14.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2018-1999023?
CVE-2018-1999023 has a severity rating that indicates a significant risk of code execution outside the sandbox.
How do I fix CVE-2018-1999023?
To fix CVE-2018-1999023, update The Battle for Wesnoth to the latest version beyond 1.14.3.
Who is affected by CVE-2018-1999023?
CVE-2018-1999023 affects users of The Battle for Wesnoth versions 1.7.0 through 1.14.3.
What type of vulnerability is CVE-2018-1999023?
CVE-2018-1999023 is a code injection vulnerability in the Lua scripting engine.
How can CVE-2018-1999023 be exploited?
CVE-2018-1999023 can be exploited by loading specially-crafted saved games, networked games, or replays.