Skip to content
CVE PROGRAM SOURCE RECORD3.9 Low

CVE-2020-5253

Privilege escalation in NetHack

Description

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NetHack NetHack

  • < 3.6.0affected

References