Описание
Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 2:0.25.0-1 |
| eoan | ignored | end of life |
| esm-apps-legacy/xenial | released | 2:0.17.1-1ubuntu0.1~esm1 |
| esm-apps/bionic | released | 2:0.21.1-1ubuntu0.1~esm1 |
| esm-apps/focal | released | 2:0.24.0-1ubuntu0.1~esm1 |
| esm-apps/jammy | not-affected | 2:0.25.0-1 |
| esm-apps/noble | not-affected | 2:0.25.0-1 |
| esm-apps/xenial | released | 2:0.17.1-1ubuntu0.1~esm1 |
| esm-infra-legacy/trusty | DNE |
Показывать по
Ссылки на источники
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3
Связанные уязвимости
Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.
Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote ...
Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.
ALT-PU-2021-1634: package `stone_soup` update to version 0.26.1-alt1
EPSS
7.5 High
CVSS2
9.8 Critical
CVSS3