{"action":"Upgrade crispy-doom to 5.9.0-1 or later.","affected":[{"fixed":"5.9.0-1","introduced":"0"}],"component":"crispy-doom","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["5.9.0-1"],"id":"tcs_01M5NEMNZ59EBJDSYTJWJQRSMM","modified_at":"2026-10-26T12:02:27.561916073Z","published_at":"2020-06-22T20:15:11.380Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2020-14983","https://security-tracker.debian.org/tracker/CVE-2020-14983"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2020-14983#Debian:12/crispy-doom","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2020-14983"}],"summary":"The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack."}