NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that allow users to upload their own configuration files.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from     configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that     allow users to upload their own configuration files. (CVE-2019-19905)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - NetHack 3.6.x before 3.6.4 is prone to a buffer overflow vulnerability when reading very long lines from
    configuration files. This affects systems that have NetHack installed suid/sgid, and shared systems that
    allow users to upload their own configuration files. (CVE-2019-19905)

ID	Name	Product	Family	Severity
250730	Linux Distros Unpatched Vulnerability : CVE-2019-19905	Nessus	Misc.	critical
405717	Alpine: multiple nethack packages: security update to 3.6.4-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
405717	Alpine: multiple nethack packages: security update to 3.6.4-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
400409	Alpine: multiple nethack packages: security update to 3.6.2-r0 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
400409	Alpine: multiple nethack packages: security update to 3.6.2-r0 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical

Detections

Analytics

CVE-2019-19905

critical

Tenable Plugins

critical

critical

critical

critical

critical