The server in Chocolate Doom 3.0.0 and Crispy Doom 5.8.0 doesn't validate the user-controlled num_players value, leading to a buffer overflow. A malicious user can overwrite the server's stack. References: https://github.com/chocolate-doom/chocolate-doom/issues/1293
Created chocolate-doom tracking bugs for this issue: Affects: fedora-all [bug 1852413]
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.