Buffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gai

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• debian debian linux2.2
• debian debian linux3.0
• falconseye project falconseyeup to 1.9.3 inclusive
• nethack nethackup to 3.4.0 inclusive

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2019-19905NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files.
  40Plan
• CVE-2020-5253Privilege escalation in NetHack
  39Monitor
• CVE-2020-5211NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow
  39Monitor
• CVE-2020-5214NetHack error recovery after syntax error in configuration file is subject to a buffer overflow
  39Monitor
• CVE-2020-5213NetHack SYMBOL configuration file option is subject to a buffer overflow
  39Monitor
• CVE-2020-5212NetHack MENUCOLOR configuration file option is subject to a buffer overflow
  39Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.