7.5 - DSA-3948

Executive Summary

Summary
Title	ioquake3 security update

Informations
Name	DSA-3948	First vendor Publication	2017-08-19
Vendor	Debian	Last vendor Modification	2017-08-19
Severity (Vendor)	N/A	Revision	1

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:P/I:P/A:P)
Cvss Base Score	7.5	Attack Range	Network
Cvss Impact Score	6.4	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A read buffer overflow was discovered in the idtech3 (Quake III Arena) family of game engines. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted packet.

For the oldstable distribution (jessie), this problem has been fixed in version 1.36+u20140802+gca9eebb-2+deb8u2.

For the stable distribution (stretch), this problem has been fixed in version 1.36+u20161101+dfsg1-2+deb9u1.

We recommend that you upgrade your ioquake3 packages.

Original Source

Url : http://www.debian.org/security/2017/dsa-3948

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

Nessus® Vulnerability Scanner

Date	Description
2017-08-21	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3948.nasl - Type : ACT_GATHER_INFO
2017-08-14	Name : The remote Debian host is missing a security-related update. File : debian_DSA-3941.nasl - Type : ACT_GATHER_INFO