UBUNTU-CVE-2018-18541
- Source
- https://ubuntu.com/security/CVE-2018-18541
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2018/UBUNTU-CVE-2018-18541.json
- JSON Data
- https://api.osv.dev/v1/vulns/UBUNTU-CVE-2018-18541
- Related
- Published
- 2018-10-20T22:29:00Z
- Modified
- 2025-01-13T10:21:41Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote attacker could send connection packets from a spoofed IP address and occupy all server slots, or even use them for a reflection attack using map download packets.
- References
-
- https://ubuntu.com/security/CVE-2018-18541
- https://www.teeworlds.com/forum/viewtopic.php?id=12544
- https://github.com/teeworlds/teeworlds/issues/1536
- https://github.com/teeworlds/teeworlds/commit/a263185571903ead01f6b351a91ea219ac9d215f
- https://github.com/teeworlds/teeworlds/commit/aababc63eeeee1bc41672502ca6c7a1dd9f61d94
- https://github.com/teeworlds/teeworlds/commit/f5fa1a92ed81ed8da721e803a036b1553a38e39e
- https://bugs.debian.org/911487
- https://teeworlds.com/?page=news&id=12544
- https://www.cve.org/CVERecord?id=CVE-2018-18541