Approved changes feed: RSS · Atom
cpe:2.3:a:nethack:nethack:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Nethack (751af7ec-9568-5571-b69d-dc9d94f5a9fd) |
|---|---|
| Product | Nethack (d05496a9-4a16-5710-b728-cc226ca69c63) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/nethack |
purl2cpe | 2026-06-01 10:18:01.387834 |
pkg:deb/ubuntu/nethack |
purl2cpe | 2026-06-01 10:18:01.387838 |
pkg:github/nethack/nethack |
purl2cpe | 2026-06-01 10:18:01.387842 |
pkg:rpm/fedora/nethack |
purl2cpe | 2026-06-01 10:18:01.387846 |
pkg:sourceforge/nethack |
purl2cpe | 2026-06-01 10:18:01.387849 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-24809 |
vulnerable | 2026-06-08 05:56:06.266193 |
NetHack Call command buffer overflow
MEDIUM (5.5)
NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the "C" (call) command can cause a buffer overflow and crash the NetHack process. This vulnerability may be a security issue for systems that have NetHack installed suid/sgid and for shared systems. For all systems, it may result in a process crash. This issue is resolved in NetHack 3.6.7. There are no known workarounds.
Published: 2023-02-17T19:41:24.248Z
Updated: 2025-03-10T21:09:40.920Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5254 |
vulnerable | 2026-06-08 05:26:41.608019 |
NetHack hilite_status parsing privilege escalation
LOW (3.9)
In NetHack before 3.6.6, some out-of-bound values for the hilite_status option can be exploited. NetHack 3.6.6 resolves this issue.
Published: 2020-03-10T16:45:14.000Z
Updated: 2024-08-04T08:22:09.084Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5253 |
vulnerable | 2026-06-08 05:26:41.607697 |
Privilege escalation in NetHack
LOW (3.9)
NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.
Published: 2020-03-10T16:35:14.000Z
Updated: 2024-08-04T08:22:09.098Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5214 |
vulnerable | 2026-06-08 05:26:41.512258 |
NetHack error recovery after syntax error in configuration file is subject to a buffer overflow
MEDIUM (5)
In NetHack before 3.6.5, detecting an unknown configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
Published: 2020-01-28T17:55:13.000Z
Updated: 2024-08-04T08:22:08.719Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5213 |
vulnerable | 2026-06-08 05:26:41.511867 |
NetHack SYMBOL configuration file option is subject to a buffer overflow
MEDIUM (5)
In NetHack before 3.6.5, too long of a value for the SYMBOL configuration file option can cause a buffer overflow resulting in a crash or remote code execution/privilege escalation. This vulnerability affects systems that have NetHack installed suid/sgid and shared systems that allow users to upload their own configuration files. Users should upgrade to NetHack 3.6.5.
Published: 2020-01-28T17:55:18.000Z
Updated: 2024-08-04T08:22:08.960Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5212 |
vulnerable | 2026-06-08 05:26:41.511448 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5211 |
vulnerable | 2026-06-08 05:26:41.511016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5210 |
vulnerable | 2026-06-08 05:26:41.510673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5209 |
vulnerable | 2026-06-08 05:26:41.510189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-19905 |
vulnerable | 2026-06-08 05:13:23.952353 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0358 |
vulnerable | 2026-06-08 04:47:21.392158 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.