CVE-2019-19905: Buffer Overflow
Published Dec 19, 2019
·Updated
NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files.
Affected Software
1 affected component
NetHack NetHack>=3.6.0<3.6.4
Remediation
Patch Available
Event History
Dec 19, 2019
CVE Published
via MITRE·05:39 PM
Data Sourced
via MITRE·05:39 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-19905?
CVE-2019-19905 is considered a medium severity vulnerability due to its potential to cause buffer overflow issues.
2
How do I fix CVE-2019-19905?
To fix CVE-2019-19905, upgrade NetHack to version 3.6.4 or later.
3
What versions of NetHack are affected by CVE-2019-19905?
CVE-2019-19905 affects NetHack versions before 3.6.4.
4
Who is at risk from CVE-2019-19905?
Users of NetHack installed with suid/sgid permissions or on shared systems allowing configuration file uploads are at risk.
5
What type of vulnerability is CVE-2019-19905?
CVE-2019-19905 is a buffer overflow vulnerability related to handling long lines in configuration files.