The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://bugs.openttd.org/task/3909 - Patch | |
| References | () http://bugs.openttd.org/task/3909/getfile/6237/loop_fix.patch - Patch | |
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044516.html - | |
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044565.html - | |
| References | () http://osvdb.org/66503 - | |
| References | () http://secunia.com/advisories/40630 - Vendor Advisory | |
| References | () http://secunia.com/advisories/40760 - Vendor Advisory | |
| References | () http://security.openttd.org/en/CVE-2010-2534 - Patch, Vendor Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2010/07/20/1 - | |
| References | () http://www.securityfocus.com/bid/41804 - Patch | |
| References | () http://www.vupen.com/english/advisories/2010/1888 - Patch, Vendor Advisory | |
| References | () http://www.vupen.com/english/advisories/2010/1916 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/60568 - |
Information
Published : 2010-07-28 12:48
Updated : 2024-11-21 01:16
NVD link : CVE-2010-2534
Mitre link : CVE-2010-2534
CVE.ORG link : CVE-2010-2534
JSON object : View
Products Affected
openttd
- openttd
CWE
CWE-399
Resource Management Errors