Debian Long Term Support / LTS Security Information / 2017 / Security Information -- DLA-1210-1 kildclient

Debian Security Advisory

DLA-1210-1 kildclient -- LTS security update

Date Reported:

16 Dec 2017

Affected Packages:

kildclient

Vulnerable:

Yes

Security database references:

In Mitre's CVE dictionary: CVE-2017-17511.

More information:

It was discovered that there was a command-injection vulnerability in kildclient, a MUD multiplayer real-time virtual world game.

For Debian 7 Wheezy, this issue has been fixed in kildclient version 2.11.1-1+deb7u1. Thanks to Eduardo M Kalinowski for help in preparing this update.

We recommend that you upgrade your kildclient packages.