Vulnerability index

Browse CVEs

7 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Ioquake3 CRITICAL 9.8
CVE-2017-11721

Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified o…

Fix: after 2017-07-31
Fix from $2,300 2017-08-03
Ioquake3 HIGH 7.8
CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, Open…

Fix: after 2017-02-27
Fix from $1,950 2017-03-14
Ioquake3 Engine HIGH 7.8
CVE-2010-5077

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a deni…

Mitigation only
Fix from $1,950 2014-10-27
Ioquake3 Engine MEDIUM 5.6
CVE-2012-3345

ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.

Mitigation only
Fix from $1,600 2012-06-15
Ioquake3 Engine HIGH 10.0
CVE-2011-3012EPSS 8%

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file ext…

Fix: after 1.2
Fix from $1,950 2011-08-09
Ioquake3 Engine HIGH 10.0
CVE-2011-2764EPSS 9%

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, Op…

Fix: after 1.36
Fix from $1,950 2011-08-04
Ioquake3 Engine HIGH 7.5
CVE-2011-1412

sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows …

Patch available
Fix from $1,950 2011-08-04