Описание
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| cosmic | ignored | end of life |
| devel | not-affected | 0.7.0-1 |
| disco | not-affected | 0.7.0-1 |
| eoan | not-affected | 0.7.0-1 |
| esm-apps-legacy/xenial | needed | |
| esm-apps/bionic | needed | |
| esm-apps/focal | not-affected | 0.7.0-1 |
| esm-apps/jammy | not-affected | 0.7.0-1 |
| esm-apps/noble | not-affected | 0.7.0-1 |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
In Teeworlds before 0.6.5, connection packets could be forged. There w ...
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
ALT-PU-2018-2920: package `teeworlds` update to version 0.7.0-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3