NVD Vulnerability Detail

CVE-2019-20797

Summary	An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.
Publication Date	May 18, 2020, 9:15 a.m.
Registration Date	Jan. 26, 2021, 11:41 a.m.
Last Update	Nov. 21, 2024, 1:39 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:prboom-plus_project:prboom-plus:2.5.1.5:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00027.html
2	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00027.html
3	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00028.html
4	http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00028.html
5	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77J22ZEQXS5SAYZGBDJ475AKFFJNKX5L/
6	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77J22ZEQXS5SAYZGBDJ475AKFFJNKX5L/
7	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3WS7GRZUIHCGLFET33MGC3PEKCH37W6/
8	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3WS7GRZUIHCGLFET33MGC3PEKCH37W6/
9	https://logicaltrust.net/blog/2019/10/prboom1.html	Exploit Third Party Advisory
10	https://logicaltrust.net/blog/2019/10/prboom1.html	Exploit Third Party Advisory
11	https://sourceforge.net/p/prboom-plus/bugs/252/	Third Party Advisory
12	https://sourceforge.net/p/prboom-plus/bugs/252/	Third Party Advisory
13	https://sourceforge.net/p/prboom-plus/bugs/253/	Third Party Advisory
14	https://sourceforge.net/p/prboom-plus/bugs/253/	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-787	境界外書き込み	https://cwe.mitre.org/data/definitions/787.html

JVN Vulnerability Information

e6y prboom-plus における境界外書き込みに関する脆弱性

Title	e6y prboom-plus における境界外書き込みに関する脆弱性
Summary	e6y prboom-plus には、境界外書き込みに関する脆弱性が存在します。
Possible impacts	サービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Aug. 18, 2019, midnight
Registration Date	June 16, 2020, 4:30 p.m.
Last Update	June 16, 2020, 4:30 p.m.

Affected System

prboom-plus project

prboom-plus 2.5.1.5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-20797	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-20797
National Vulnerability Database (NVD)
2	CVE-2019-20797	https://nvd.nist.gov/vuln/detail/CVE-2019-20797

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-787	https://cwe.mitre.org/data/definitions/787.html

ベンダー情報

No	Name	URL
SourceForge
1	#252 Heap buffer overflow in server's packet retransmission	https://sourceforge.net/p/prboom-plus/bugs/252/
2	#253 Heap buffer overflow in client's packet retransmission	https://sourceforge.net/p/prboom-plus/bugs/253/

Change Log

No	Changed Details	Date of change
1	[2020年06月16日] 掲載	June 16, 2020, 4:30 p.m.