Dungeon Crawl Stone Soup (aka DCSS or crawl) before 0.25 allows remote attackers to execute arbitrary code via Lua bytecode embedded in an uploaded .crawlrc file.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade crawl | Jul 30, 2024 | Apr 12, 2020 |
| Suse | — | Upgrade crawlUpgrade crawl-dataUpgrade crawl-sdl | Apr 25, 2020 | Apr 12, 2020 |
| Ubuntu | — | Upgrade crawl-tiles-data (Ubuntu Pro)Upgrade crawl-common (Ubuntu Pro)Upgrade crawl-tiles (Ubuntu Pro)Upgrade crawl (Ubuntu Pro) | Jan 21, 2026 | Apr 12, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub
