Vulnerability Name:

CVE-2019-20787 (CCN-180481)

Assigned:2019-03-23
Published:2019-03-23
Updated:2020-04-29
Summary:Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.
CVSS v3 Severity:9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
6.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-190
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2019-20787

Source: SUSE
Type: Third Party Advisory
openSUSE-SU-2020:0557

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2020:0563

Source: XF
Type: UNKNOWN
teeworlds-cve201920787-overflow(180481)

Source: FEDORA
Type: UNKNOWN
FEDORA-2020-0d6b80678a

Source: CCN
Type: Teeworlds Web site
Teeworlds

Source: MISC
Type: Release Notes, Vendor Advisory
https://www.teeworlds.com/forum/viewtopic.php?pid=123860

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2019-20787

Vulnerable Configuration:Configuration 1:
  • cpe:/a:teeworlds:teeworlds:*:*:*:*:*:*:*:* (Version < 0.7.4)

    • Configuration 2:
  • cpe:/o:opensuse:leap:15.1:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:teeworlds:teeworlds:0.7.3:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:201920787
    V
    		CVE-2019-20787
    2022-06-30
    oval:org.opensuse.security:def:113487
    P
    		teeworlds-0.7.5-2.9 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:64642
    P
    		Security update for permissions (Moderate)
    2021-12-28
    oval:org.opensuse.security:def:64584
    P
    		Security update for git (Low)
    2021-10-06
    oval:org.opensuse.security:def:106883
    P
    		teeworlds-0.7.5-2.9 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:64754
    P
    		Security update for qemu (Moderate)
    2021-08-27
    oval:org.opensuse.security:def:63330
    P
    		graphviz-tcl-2.40.1-6.6.8 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:62827
    P
    		python3-cupshelpers-1.5.7-6.27 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:63037
    P
    		perl-YAML-LibYAML-0.69-3.3.1 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62831
    P
    		texlive-12many-2017.133.0.0.3svn15878-6.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62834
    P
    		vino-3.22.0-9.32 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:100310
    P
    		 (Important)
    2021-07-20
    oval:org.opensuse.security:def:63533
    P
    		enigmail-2.0.5-1.2 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:62859
    P
    		libpcp-devel-3.11.9-3.116 on GA media (Moderate)
    2021-06-08
    oval:org.opensuse.security:def:64482
    P
    		Security update for libnettle (Important)
    2021-04-28
    oval:org.opensuse.security:def:74696
    P
    		Security update for the Linux Kernel (Important)
    2021-03-09
    oval:org.opensuse.security:def:93597
    P
    		 (Important)
    2021-02-26
    oval:org.opensuse.security:def:74829
    P
    		Security update for teeworlds (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:64374
    P
    		libpulse-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63680
    P
    		Security update for ucode-intel (Important)
    2020-12-01
    oval:org.opensuse.security:def:64375
    P
    		libpython2_7-1_0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:63909
    P
    		Security update for openssl-1_1 (Important)
    2020-12-01
    oval:org.opensuse.security:def:64238
    P
    		dbus-1-glib on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:110491
    P
    		Security update for teeworlds (Moderate)
    2020-04-27
    BACK
    teeworlds teeworlds *
    opensuse leap 15.1
    teeworlds teeworlds 0.7.3