CVE-2020-14983

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Jun 22, 2020 (Jun 22, 2020)

Modified

Jun 17, 2026

Description

The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack.

Vendors: chocolate-doom opensuse
Products: chocolate doom, crispy doom, backports, leap
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.2%)

In the news0 stories

No ingested article mentions this CVE yet.