CVE-2019-20797

Published: May 18, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.

Affected (1)

Products: Prboom Plus Project: Prboom Plus

Prboom Plus Project

1 product

Prboom Plus

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Prboom Plus Project Prboom Plus	Version 2.5.1.5

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (14)

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00027.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00028.html

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/77J22ZEQXS5SAYZGBDJ475AKFFJNKX5L/

Source: cve@mitre.org

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3WS7GRZUIHCGLFET33MGC3PEKCH37W6/

Source: cve@mitre.org

https://logicaltrust.net/blog/2019/10/prboom1.html

Source: cve@mitre.org

ExploitThird Party Advisory

https://sourceforge.net/p/prboom-plus/bugs/252/

Source: cve@mitre.org

Third Party Advisory

https://sourceforge.net/p/prboom-plus/bugs/253/

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00027.html