CVE-2018-18541 In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP ad...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/teeworlds(Debian:12) | < 0.7.0-1 | 0.7.0-1 |
| debian/teeworlds(Debian:13) | < 0.7.0-1 | 0.7.0-1 |
| debian/teeworlds(Debian:14) | < 0.7.0-1 | 0.7.0-1 |
| teeworlds | < 0.6.5 | 0.6.5 |
| debian linux | = 9.0 | No fix listed |
References
- Debian Security Tracker CVE-2018-18541 vendor-advisory
- openSUSE-SU-2019:1793 vendor-advisory
- openSUSE-SU-2019:1999 vendor-advisory
- bugs.debian.org issue-tracking mailing-list patch third-party-advisory
- github.com patch vendor-advisory
- teeworlds.com vendor-advisory
- DSA-4329 third-party-advisory vendor-advisory