CVE catalog

CVE-2019-20797

UBUNTU-CVE-2019-20797

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
3.09% · Oct 25, 2026

An issue was discovered in e6y prboom-plus 2.5.1.5. There is a buffer overflow in client and server code responsible for handling received UDP packets, as demonstrated by I_SendPacket or I_SendPacketTo in i_network.c.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianprboom-plus112:2.5.1.7um+git82-1fixed
Suseprboom-pluspackage hub 15 sp12.5.1.4-bp151.4.3.1fixed
Opensuseprboom-plustumbleweed2.6.1um-1.2fixed
Opensuseprboom-plusleap 15.12.5.1.4-lp151.3.3.1fixed
Ubuntuprboom-plus16.042:2.5.1.4~svn4425+dfsg1-2vulnerable
Ubuntuprboom-plus16.042:2.5.1.4~svn4444+dfsg1-1vulnerable
Ubuntuprboom-plus16.042:2.5.1.4~svn4454+dfsg1-1vulnerable
Ubuntuprboom-plus16.042:2.5.1.4~svn4457+dfsg1-1vulnerable
Ubuntuprboom-plus16.042:2.5.1.5~svn4462+dfsg1-1vulnerable
Ubuntuprboom-plus18.042:2.5.1.5~svn4462+dfsg1-1build1vulnerable
Ubuntuprboom-plus18.042:2.5.1.5+svn4531+dfsg1-1vulnerable
Ubuntuprboom-plus20.042:2.5.1.5+svn4540+dfsg1-1vulnerable
Ubuntuprboom-plus20.042:2.5.1.5+svn4540+dfsg1-1build1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianprboom-plusdeb112:2.5.1.7um+git82-1Not reportedDEBIAN-CVE-2019-20797Not reported
Suseprboom-plusrpmpackage hub 15 sp12.5.1.4-bp151.4.3.1Not reportedOPENSUSE-SU-2020:0820-1Not reported
Opensuseprboom-plusrpmtumbleweed2.6.1um-1.2Not reportedOPENSUSE-SU-2024:11192-1Not reported
Opensuseprboom-plusrpmleap 15.12.5.1.4-lp151.3.3.1Not reportedOPENSUSE-SU-2020:0807-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

  • [prboom-plus]Fixed

    Source package: [prboom-plus]

    Details (1)

    • 2.6.66-6.5 · x86_64 · tumbleweed

      Fixed · Fixed: 2.6.1um-1.2

      pypi · prboom-plus · opensuse · tumbleweed

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]