Ioquake3
4 CVEs tracked since 2011. Since Aug 2011, none of them reached CISA KEV.
Ioquake3 CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2011-08 | 3 | 0 |
| 2011-09 | null or fewer | |
| 2011-10 | null or fewer | |
| 2011-11 | null or fewer | |
| 2011-12 | null or fewer | |
| 2012-01 | null or fewer | |
| 2012-02 | null or fewer | |
| 2012-03 | null or fewer | |
| 2012-04 | null or fewer | |
| 2012-05 | null or fewer | |
| 2012-06 | 1 | 0 |
Products
The products that kept showing up in Ioquake3's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 7 most recently published vulnerabilities affecting Ioquake3.
- CVE-2017-11721Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted packet.9.8
- CVE-2017-6903In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 (aka Quake 3 eng...7.8
- CVE-2010-5077server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) vi...7.8
- CVE-2012-3345ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.5.6
- CVE-2011-3012The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, ...10.0
- CVE-2011-2764The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not ...10.0
- CVE-2011-1412sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote game servers to execute arbitrary command...7.5
The record
- Peak rank
- #25 in Aug 2011
- Busiest month shown
- Aug 2011, 3 CVEs
- Months with a KEV entry
- 0 since Aug 2011
- Monthly snapshots
- 2 since 2011