Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

NetHack — Vulnerabilities & Security Advisories 9

Browse all 9 CVE security advisories affecting NetHack. AI-powered Chinese analysis, POCs, and references for each vulnerability.

NetHack serves as a classic single-player dungeon exploration game with ASCII-based graphics, primarily used for entertainment and educational purposes in computing history. Historically, it has been susceptible to remote code execution, buffer overflows, and privilege escalation vulnerabilities due to its legacy codebase and complex interaction systems. While not a business application, its open-source nature has led to multiple security findings, with nine CVEs recorded to date. Notable incidents include memory corruption flaws allowing arbitrary code execution through crafted save files, though no major public breaches have been documented. The game's intricate mechanics and long development cycle contribute to ongoing security challenges in maintaining legacy code integrity.

Found 9 results / 9Clear Filters
Top products by NetHack: NetHack
CVE IDTitleCVSSSeverityPublished
CVE-2023-24809 NetHack Call command buffer overflow — NetHackCWE-120 5.5 Medium2023-02-17
CVE-2020-5254 NetHack hilite_status parsing privilege escalation — NetHackCWE-125 3.9 Low2020-03-10
CVE-2020-5253 Privilege escalation in NetHack — NetHackCWE-184 3.9 Low2020-03-10
CVE-2020-5211 NetHack AUTOCOMPLETE configuration file option is subject to a buffer overflow — NetHackCWE-120 5.0 Medium2020-01-28
CVE-2020-5212 NetHack MENUCOLOR configuration file option is subject to a buffer overflow — NetHackCWE-120 5.0 Medium2020-01-28
CVE-2020-5213 NetHack SYMBOL configuration file option is subject to a buffer overflow — NetHackCWE-120 5.0 Medium2020-01-28
CVE-2020-5214 NetHack error recovery after syntax error in configuration file is subject to a buffer overflow — NetHackCWE-120 5.0 Medium2020-01-28
CVE-2020-5209 NetHack command line parsing of options starting with -de and -i is subject to a buffer overflow — NetHackCWE-120 5.0 Medium2020-01-28
CVE-2020-5210 NetHack command line -w option parsing is subject to a buffer overflow — NetHackCWE-120 5.0 Medium2020-01-28

This page lists every published CVE security advisory associated with NetHack. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.