PT-2010-5333 · Openttd · Openttd

Remko Bijker + 1 · Publicado 2010-11-17 · Atualizado 2024-06-15 · CVE-2010-4168

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenTTD versions 1.0.x through 1.0.4

Description The issue concerns multiple use-after-free vulnerabilities. These vulnerabilities allow remote attackers to cause a denial of service by abruptly disconnecting during transmission of the map from the server, related to network/network server.cpp, or by forcing a disconnection during the join process, related to network/network.cpp. This can result in an invalid write and daemon crash, or an invalid read and daemon or application crash.

Recommendations For OpenTTD versions 1.0.x through 1.0.4, update to version 1.0.5 or later to resolve the issue.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

CVE-2010-4168

OPENSUSE-SU-2024:10563-1

Produtos afetados

Openttd

Referências · 20

• http://marc.info/?l=oss-security&m=128975491407670&w=2 · Nota
• https://suse.com/security/cve/CVE-2012-0049 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052193.html · Aviso do Fabricante
• http://securityfocus.com/bid/44844 · Nota
• https://suse.com/security/cve/CVE-2013-6411 · Nota
• http://secunia.com/advisories/42578 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10563-1 · Aviso do Fabricante
• http://marc.info/?l=oss-security&m=128984298802678&w=2 · Nota
• http://security.openttd.org/en/patch/28.patch · Correção
• http://lists.fedoraproject.org/pipermail/package-announce/2010-December/052187.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/3199 · Nota
• http://security.openttd.org/en/CVE-2010-4168 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2012-3436 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-4168 · Nota de Segurança
• http://vcs.openttd.org/svn/changeset/21182 · Nota