CVE-2023-24288 PUBLISHED

Assigner: mitre
Reserved: 23.01.2023 Published: 14.09.2026 Updated: 14.09.2026

An issue in Portable Puzzle Collection before 20230116.5782e29 allows attackers to cause a Denial of Service (DoS) via creating an excessive amount of save states.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS Score: 2.9

Attack Vector	Local	Scope	Unchanged
Attack Complexity	High	Confidentiality Impact	None
Privileges Required	None	Integrity Impact	None
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	Simon Tatham
Product	Portable Puzzle Collection
Versions	Default: unaffected affected from 0 to 20230116.5782e29 (excl.)

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028986
https://git.tartarus.org/?p=simon/puzzles.git;a=commit;h=b3d4a4197954c21ac78b68c58dff8f84fe743ea2

Problem Types

CWE-190 Integer Overflow or Wraparound CWE