Description
engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | teeworlds | 0.6.2+dfsg-2 | — |
| Debian 13 | teeworlds | 0.6.2+dfsg-2 | — |
| Debian 12 | teeworlds | 0.6.2+dfsg-2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | teeworlds | 0.6.2+dfsg-2~build0.14.04.1 | — |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | teeworlds | 0.7.5-2.9 | openSUSE-SU-2024:11427-1 |
Advisories 1
- openSUSE-SU-2024:11427-1 teeworlds-0.7.5-2.9 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=770514
- FEDORA-2014-15701 vendor-advisory
- https://www.teeworlds.com/?page=news&id=11200
- 71301 vdb-entry
- FEDORA-2014-15670 vendor-advisory
- FEDORA-2014-15733 vendor-advisory
- https://github.com/teeworlds/teeworlds/commit/a766cb44bcffcdb0b88e776d01c5ee1323d44f85