VULNERABILITY INTELLIGENCE

CVE-2020-5253

CVSS score3.9 LOW

EPSS probability0.54%

CISA KEVNot currently listed

Published2020-03-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

NetHack before version 3.6.0 allowed malicious use of escaping of characters in the configuration file (usually .nethackrc) which could be exploited. This bug is patched in NetHack 3.6.0.

Weakness classification

CWE-184: Incomplete List of Disallowed Inputs
CWE-269: Improper Privilege Management

Primary references

security-advisories@github.com — Patch, Third Party Advisory
security-advisories@github.com — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory