CVE-2019-10879

Publication date 5 April 2019

Last updated 26 August 2025

Ubuntu priority

Medium

Why this priority?

Cvss 3 Severity Score

9.8 · Critical

Score breakdown

Description

In Teeworlds 0.7.2, there is an integer overflow in CDataFileReader::Open() in engine/shared/datafile.cpp that can lead to a buffer overflow and possibly remote code execution, because size-related multiplications are mishandled.

Status

Package Ubuntu Release Status
teeworlds 26.04 LTS resolute
Fixed 0.7.2-5
25.10 questing
Fixed 0.7.2-5
25.04 plucky
Fixed 0.7.2-5
24.10 oracular
Fixed 0.7.2-5
24.04 LTS noble
Fixed 0.7.2-5
23.10 mantic
Fixed 0.7.2-5
23.04 lunar
Fixed 0.7.2-5
22.10 kinetic
Fixed 0.7.2-5
22.04 LTS jammy
Fixed 0.7.2-5
21.10 impish
Fixed 0.7.2-5
21.04 hirsute
Fixed 0.7.2-5
20.10 groovy
Fixed 0.7.2-5
20.04 LTS focal
Fixed 0.7.2-5
19.10 eoan
Fixed 0.7.2-5
19.04 disco Ignored end of life
18.10 cosmic Ignored end of life
18.04 LTS bionic
Vulnerable
16.04 LTS xenial
Vulnerable
14.04 LTS trusty Not in release

Severity score breakdown

CVSS version: CVSS v3.0

Base score 9.8 · Critical

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

Other references

Access our resources on patching vulnerabilities