Toribash
Toribash: vulnerabilities and CVEs
Toribash has 7 published vulnerabilities, 0 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.
CVEs7
Last 12 months0
Critical0
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-4449 | Medium (5) | 1.5% | — | Aug 21, 2007 | The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a command without an LF character, as demonstrated by a SAY command. |
| CVE-2007-4446 | High (7.5) | 4.2% | — | Aug 21, 2007 | Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game. |
| CVE-2007-4447 | High (7.5) | 4.0% | — | Aug 21, 2007 | Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game command in a replay (.rpl) file and (2) cause a denial of service (application… |
| CVE-2007-4448 | Medium (5) | 1.8% | — | Aug 21, 2007 | The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which allows remote attackers to cause a denial of service (daemon crash) via a GRIP… |
| CVE-2007-4450 | Medium (5) | 1.5% | — | Aug 21, 2007 | The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violation in which data is sent to other clients without a required LF character, as… |
| CVE-2007-4451 | Medium (5) | 1.5% | — | Aug 21, 2007 | The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous beep and server hang) via certain commands that contain many 0x07 or other invalid characters. |
| CVE-2007-4452 | Medium (5) | 1.8% | — | Aug 21, 2007 | The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long (1) emote or (2) SPEC command. |