TI-2020-04309 Aliases CVE-2020-5253

Privilege escalation in NetHack

MEDIUM 43CWE-184Published 2020-03-10 · Updated 2024-08-04

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Privilege escalation
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.

Summary

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.

Why it matters now

EPSS 0.00543 45th percentileScored 2026-11-07

Fix Fixed NetHack (NetHack): 3.6.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
NetHack	NetHack	before 3.6.0	3.6.0	Patch available	CNA

NetHack VendorNetHack Affected before 3.6.0 Fixed in 3.6.0 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:nethack:nethack::::::::	before 3.6.0	Vulnerable	NetHack

cpe:2.3:a:nethack:nethack:*:*:*:*:*:*:*:* Versions before 3.6.0 Vulnerable ·NetHack

Remediation

Fix · CNA NetHack (NetHack) Fixed in 3.6.0

Timeline

2026-10-02 Threatist record created from CVE-2020-5253

References

Patch 1

https://github.com/NetHack/NetHack/commits/612755bfb5c412079795c68ba392df5d93874ed8

Advisory 1

https://github.com/NetHack/NetHack/security/advisories/GHSA-2c7p-3fj4-223m

TI-2019-14352 NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very… CVSS 3.1CRITICAL 9.8
TI-2020-04270 NetHack error recovery after syntax error in configuration file is subject to a buffer overflow CVSS 3.1CRITICAL 9.8
TI-2020-04269 NetHack SYMBOL configuration file option is subject to a buffer overflow CVSS 3.1CRITICAL 9.8
TI-2020-04268 NetHack MENUCOLOR configuration file option is subject to a buffer overflow CVSS 3.1CRITICAL 9.8
TI-2020-04267 NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow CVSS 3.1CRITICAL 9.8
TI-2020-04310 NetHack hilite_status parsing privilege escalation CVSS 3.1HIGH 8.1

See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences