Denial of Service Vulnerability in Portable Puzzle Collection Software by Tartarus
CVE-2023-24288

2.9LOW

Key Information:

Vendor

Simon Tatham

Status
Portable Puzzle Collection
Vendor
CVE Published:
14 September 2026

What is CVE-2023-24288?

The Portable Puzzle Collection software, prior to version 20230116.5782e29, has a vulnerability that enables attackers to create an excessive number of save states, potentially leading to a Denial of Service (DoS). This exploitation can cause applications to become unresponsive, disrupting user activities and affecting overall system performance. Users are advised to update to the latest version to mitigate this risk.

Affected Version(s)

Portable Puzzle Collection 0 < 20230116.5782e29

References

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1028986
https://git.tartarus.org/?p=simon/puzzles.git;a=commit;h=...

CVSS V3.1

Score:
2.9
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.