Description
An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 11 | prboom-plus | 2:2.5.1.7um+git82-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | prboom-plus | No fix yet | — |
| Ubuntu 18.04 LTS | prboom-plus | No fix yet | — |
| Ubuntu 16.04 LTS | prboom-plus | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP1 | prboom-plus | 2.5.1.4-bp151.4.3.1 | openSUSE-SU-2020:0820-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | prboom-plus | 2.6.1um-1.2 | openSUSE-SU-2024:11192-1 |
| openSUSE Leap 15.1 | prboom-plus | 2.5.1.4-lp151.3.3.1 | openSUSE-SU-2020:0807-1 |
Advisories 3
- openSUSE-SU-2020:0820-1 Security update for prboom-plus SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:11192-1 prboom-plus-2.6.1um-1.2 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2020:0807-1 Security update for prboom-plus SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://sourceforge.net/p/prboom-plus/bugs/252/
- https://sourceforge.net/p/prboom-plus/bugs/253/
- https://logicaltrust.net/blog/2019/10/prboom1.html
- FEDORA-2020-3f9a846b40 vendor-advisory
- FEDORA-2020-fe80f1f388 vendor-advisory
- openSUSE-SU-2020:0807 vendor-advisory
- openSUSE-SU-2020:0820 vendor-advisory