CVE-2020-5253CWE-184

Privilege escalation in NetHack

Low · published March 10, 2020

CVSS v3.1
3.9
EPSS
1%
Percentile
44.8
In the wild
Unconfirmed
What it is

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.

The record
Technical detail
CVSS v3.1
3.9 · LOW
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00543 · 44.8th percentile
Weakness
CWE-184 · Incomplete List of Disallowed Inputs
Published
2020-03-10T16:35Z
EPSS history
Timeline
  • 10 MAR 16:35Z
    Privilege escalation in NetHack
    cvelistv5