Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Doomsday Component: Doomsday Clear all filters
TI-2007-04495 CVE-2007-4643 · GHSA-6h87-2fpc-x688

Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote…

Priority LOW 27

Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a PKT_CHAT packet with a data length less than 3, which triggers an erroneous mal…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0215 Published 2007-08-31 No fix listed CWE-119
TI-2007-04494 CVE-2007-4642 · GHSA-4853-vw97-h7j3

Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote…

Priority MEDIUM 59

Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (PKT_CHAT) message that is not properly handled by the (1) D_NetPlayerEvent func…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16309 Published 2007-08-31 No fix listed CWE-119
TI-2006-01567 CVE-2006-1618 · GHSA-xm75-4wc4-6pj3

Format string vulnerability in the (1) Con_message and (2) conPrintf functions in…

Priority MEDIUM 48

Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the J…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.13492 Published 2006-04-05 No fix listed