CVE-2019-15767

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend...

7.8 HighFix available

CVE-2019-15767 is a high vulnerability (CVSS 7.8) in Gnu Chess, published August 29, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.47%, the 73rd percentile. Fixed in gnuchess 6.2.7-1.

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

Exploit likelihood

1.47%Up 0.2 points since Apr 14, 2021

What each source reports

NVD Score used 7.8

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: CVE-2019-15767
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-787
Updated: 2026-11-02

CVE List No score

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: CVE-2019-15767
Updated: 2026-11-02

EUVDEUVD-2019-6692 No score

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: EUVD-2019-6692
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7r53-xj4v-5fr4 No score

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend...

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: GHSA-7r53-xj4v-5fr4
Updated: 2026-11-02

OSV 7.8

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: CVE-2019-15767
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2019-15767 7.8

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: DEBIAN-CVE-2019-15767
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2019-15767 7.8

In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.

Record: UBUNTU-CVE-2019-15767
CVSS 3.0: 7.8 HighCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVMGASA-2020-0194 No score

Updated gnuchess packages fix security vulnerability

Updated gnuchess package fixes security vulnerability:

A vulnerability was found in GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file (CVE-2019-15767).

Record: MGASA-2020-0194
Updated: 2026-11-02

OSVopenSUSE-SU-2024:10799-1 No score

gnuchess-6.2.9-1.2 on GA media

These are all security issues fixed in the gnuchess-6.2.9-1.2 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:10799-1
Updated: 2026-11-02

Affected products

gnu chess

Affected packages

Affected packages
Package	Affected	Fixed
`gnuchess` Debian:12	before 6.2.7-1	6.2.7-1
`gnuchess` Debian:13	before 6.2.7-1	6.2.7-1
`gnuchess` Debian:14	before 6.2.7-1	6.2.7-1
`gnuchess` Mageia:7	before 6.2.6-1.mga7	6.2.6-1.mga7
`gnuchess` Ubuntu:18.04:LTS	All versions, plus listed versions 6.2.5-1	None known
`gnuchess` Ubuntu:20.04:LTS	All versions, plus listed versions 6.2.5-16.2.5-1build1	None known
`gnuchess` openSUSE:Tumbleweed	before 6.2.9-1.2	6.2.9-1.2

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 12 moreShow less