CoreCVE
Back

HIGH

NetHack command line parsing of options starting with -de and -i is subject to a buffer overflow

Published Jan 28, 2020

Description

In NetHack before 3.6.5, unknown options starting with -de and -i can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to influence command line options. Users should upgrade to NetHack 3.6.5.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner GitHub_M
Published Jan 28, 2020
Updated Aug 4, 2024
Reserved Jan 2, 2020
Link CVE-2020-5209

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2020-5209

Red Hat

No data

ENISA EUVD

Assigner GitHub_M
Published Jan 28, 2020
Updated Aug 4, 2024
Link EUVD-2020-26449

GitHub

No data