Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-14308

Опубликовано: 09 дек. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 9.8

Описание

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.

РелизСтатусПримечание
devel

needed

1.9.3.9-5
esm-apps-legacy/xenial

released

1.9.2.5-2ubuntu0.1~esm1
esm-apps/bionic

released

1.9.3.1-1ubuntu0.1~esm1
esm-apps/focal

released

1.9.3.7-1ubuntu0.1~esm1
esm-apps/jammy

released

1.9.3.9-2ubuntu0.1~esm1
esm-apps/noble

released

1.9.3.9-3ubuntu0.1~esm1
esm-apps/resolute

released

1.9.3.9-4ubuntu0.26.04.1~esm1
esm-apps/xenial

ignored

end of ESM support, was needs-triage
jammy

needed

1.9.3.9-2
noble

needed

1.9.3.9-3

Показывать по

EPSS

Процентиль: 46%
0.00576
Низкий

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 9.8
nvd
9 месяцев назад

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.

CVSS3: 9.8
debian
9 месяцев назад

An integer overflow vulnerability exists in the write method of the Bu ...

CVSS3: 9.8
github
9 месяцев назад

An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.

EPSS

Процентиль: 46%
0.00576
Низкий

9.8 Critical

CVSS3