The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.

The remote host is affected by the vulnerability described in GLSA-201705-13 (Teeworlds: Remote execution of arbitrary code on client)

    Teeworlds client contains a vulnerability allowing a malicious server to       execute arbitrary code, or write to arbitrary physical memory via the       CClient::ProcessServerPacket method.
  Impact :

    A remote malicious server can write to arbitrary physical memory       locations and possibly execute arbitrary if a vulnerable client joins the       server.
  Workaround :

    There is no known workaround at this time.

Fix for CVE-2016-9400

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to 0.6.4

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
100445	GLSA-201705-13 : Teeworlds: Remote execution of arbitrary code on client	Nessus	Gentoo Local Security Checks	critical
95415	Fedora 23 : teeworlds (2016-7470a63cd1)	Nessus	Fedora Local Security Checks	critical
95407	Fedora 25 : teeworlds (2016-df20b90635)	Nessus	Fedora Local Security Checks	critical
95402	Fedora 24 : teeworlds (2016-16a522f9a6)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2016-9400

critical

Tenable Plugins

critical

critical

critical

critical