Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
net: fix missing server-side num_players validation (CVE-2020-14983)
The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack. Fixes CVE-2020-14983, found by Michał Dardas from LogicalTrust. Fixes: #1293.
- Loading branch information