CVE-2019-12968 — MEDIUM (5.3)

Vulnerability Description

A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an unnaturally long response length from a Sonic Robo Blast 2 master server, allowing a remote attacker to cause a potential crash / denial of service in Doomseeker. The issue has been remediated in the Doomseeker 1.3 release with source code patches to the SRB2 plugin.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Affected Products

Vendor	Product	Versions
Drdteam	Doomseeker	1.1

Related Weaknesses (CWE)

CWE-119

References

https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cPatchThird Party Advisory
https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2fPatchThird Party Advisory
https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issuesPatchThird Party Advisory
https://zandronum.com/tracker/view.php?id=3660Third Party Advisory
https://bitbucket.org/Doomseeker/doomseeker/commits/ae456aac888cb794ea3292f7f99cPatchThird Party Advisory
https://bitbucket.org/Doomseeker/doomseeker/commits/b9a90f1f56e704c5cbeefe83da2fPatchThird Party Advisory
https://bitbucket.org/Doomseeker/doomseeker/pull-requests/74/more-openbsd-issuesPatchThird Party Advisory
https://zandronum.com/tracker/view.php?id=3660Third Party Advisory

FAQ

What is CVE-2019-12968?

CVE-2019-12968 is a vulnerability with a CVSS score of 5.3 (MEDIUM). A vulnerability was found in the Sonic Robo Blast 2 (SRB2) plugin (EP_Versions 9 to 11 inclusive) distributed with Doomseeker 1.1 and 1.2. Affected plugin versions did not discard IP packets with an u...

How severe is CVE-2019-12968?

CVE-2019-12968 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-12968?

Check the references section above for vendor advisories and patch information. Affected products include: Drdteam Doomseeker.