CVE-2021-30184

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Apr 7, 2021
Updated: Jan 12, 2025
CWE ID 120

Summary

CVE-2021-30184 is a new vulnerability affecting GNU Chess 6.2.7. Hackers can exploit this issue by sending crafted PGN (Portable Game Notation) data to the software. This results in a buffer overflow in the handling of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions of frontend/cmd.cc. Successful exploitation allows attackers to execute arbitrary code. Users of GNU Chess are advised to update to the latest version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Fedora Operating System

Affected Vendors

  • Fedora Project
  • GNU

Advisories, Assessments, and Mitigations