CVE-2015-0844
N/A
Published: April 14, 2015 at 06:00 PM UTC
Updated: June 17, 2026 at 12:21 AM UTC
2 products affected across 2 vendorsFedoraBattle for Wesnoth
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
1.10.01.11.01.11.11.11.101.11.111.11.121.11.131.11.141.11.151.11.161.11.171.11.181.11.191.11.21.11.31.11.41.11.51.11.61.11.71.11.81.11.91.12.01.12.11.7.01.7.11.7.10-1.8 beta31.7.11-1.8 beta41.7.12-1.8 beta51.7.13-1.8 beta61.7.14-1.8 beta71.7.15-1.8 rc11.7.21.7.31.7.41.7.51.7.61.7.71.7.8 beta11.7.9 beta21.8.01.9.01.9.11.9.101.9.111.9.121.9.131.9.141.9.21.9.31.9.41.9.51.9.61.9.71.9.81.9.9
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
- http://forums.wesnoth.org/viewtopic.php?t=41870
- http://forums.wesnoth.org/viewtopic.php?t=41872
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155031.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155968.html
- http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156001.html
References (6)
x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://forums.wesnoth.org/viewtopic.php?t=41870x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://forums.wesnoth.org/viewtopic.php?t=41872Vendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155031.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155968.htmlVendor Advisoryx_refsource_FEDORA
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156001.htmlVendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2015/dsa-3218Quick Info
StatusMODIFIED
CWE
CWE-200
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card