PT-2019-13060 · Unknown · Doomseeker+1

Pol M + 1 · Published 2019-06-26 · Updated 2019-07-02 · CVE-2019-12968

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Doomseeker versions 1.1 through 1.2

Description A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin distributed with Doomseeker, where affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server. This allowed a remote attacker to cause a potential crash or denial of service in Doomseeker.

Recommendations For Doomseeker versions 1.1 and 1.2, update to Doomseeker 1.3, which includes source code patches to the SRB2 plugin to remediate the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2019-12968

Affected Products

Doomseeker

Sonic Robo Blast 2

References · 6

• https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2f9ce939920278 · Patch
• https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cb87d6b22a555 · Patch
• https://osv.dev/vulnerability/CVE-2019-12968 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-12968 · Security Note
• https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issues-3654-the-srb2-thingy/diff · Patch
• https://zandronum.com/tracker/view.php?id=3660 · Note