PT-2023-23370 · Teeworlds+1 · Teeworlds+1

Mmmds · Published 2023-05-23 · Updated 2023-05-31 · CVE-2023-31518

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions teeworlds version 0.7.5

Description A heap use-after-free issue in the CDataFileReader::GetItem component allows attackers to cause a Denial of Service (DoS) via a crafted map file.

Recommendations For teeworlds version 0.7.5, consider avoiding the use of crafted map files until a patch is available. As a temporary workaround, restrict access to the CDataFileReader::GetItem component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2023-31518

Affected Products

Debian

Teeworlds

References · 14

• 🔥 https://github.com/teeworlds/teeworlds/issues/2970 · Exploit
• 🔥 https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds · Exploit
• https://cve.org/CVERecord?id=CVE-2023-31518 · Security Note
• https://osv.dev/vulnerability/CVE-2023-31518 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/teeworlds · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-31518 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-31518 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31518 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-31518 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31518 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-31518 · Vendor Advisory
• https://packages.debian.org/src:teeworlds · Note
• https://t.me/cibsecurity/64647 · Telegram Post
• https://gist.github.com/manba-bryant/9ca95d69c65f4d2c55946932c946fb9b · Note