debian/crawl vulnerabilities

Latest debian/crawl CVEs

Newest publication first

1. CVE-2020-11722 Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

   Published 2020-04-12

   Critical·CVSS 9.8 EPSS 3.9%

   Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.

2. CVE-2006-0045 crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.

   Published 2006-01-20

   High·CVSS 7.2 EPSS 0.34%

   crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges.

3. DSA-949-1 crawl - insecure program execution

   Published 2006-01-20

   Unknown

4. CVE-2004-0103 crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.

   Published 2004-02-11

   Medium·CVSS 4.6 EPSS 0.38%

   crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.

5. DSA-432 crawl - buffer overflow

   Published 2004-02-03

   Unknown

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.