Lucene search
Gentoo FoundationGLSA-201407-01HistoryJul 07, 2014 - 12:00 a.m.
OpenTTD: Denial of service
2014-07-0700:00:00
Gentoo Foundation
security.gentoo.org
9
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.4
Confidence
Low
EPSS
0.046
Percentile
92.7%
Background
OpenTTD is a clone of Transport Tycoon Deluxe.
Description
The vulnerability is caused due to missing out-of-bound check within the “HandleCrashedAircraft()” function.
Impact
A remote attacker could possibly cause a Denial of Service condition.
Workaround
There is no known workaround at this time.
Resolution
All OpenTTD users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=games-simulation/openttd-1.3.3"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | games-simulation/openttd | < 1.3.3 | UNKNOWN |
Related
fedora
fedora
[SECURITY] Fedora 20 Update: openttd-1.3.3-1.fc20
2013-12-24 03:36:37
[SECURITY] Fedora 19 Update: openttd-1.3.3-1.fc19
2013-12-24 03:37:28
[SECURITY] Fedora 18 Update: openttd-1.3.3-1.fc18
2013-12-24 03:40:54
nessus
nessus
FreeBSD : OpenTTD -- Denial of service using forcefully crashed aircrafts (d2073237-5b52-11e3-80f7-c86000cbc6ec)
2013-12-03 00:00:00
GLSA-201407-01 : OpenTTD: Denial of Service
2014-07-08 00:00:00
Fedora 20 : openttd-1.3.3-1.fc20 (2013-23339)
2013-12-24 00:00:00
openvas
openvas
Fedora Update for openttd FEDORA-2013-23339
2014-02-03 00:00:00
Fedora Update for openttd FEDORA-2013-23378
2013-12-30 00:00:00
Fedora Update for openttd FEDORA-2013-23378
2013-12-30 00:00:00
ubuntucve
ubuntucve
CVE-2013-6411
2013-12-14 00:00:00
cvelist
cvelist
CVE-2013-6411
2013-12-14 17:00:00
nvd
nvd
CVE-2013-6411
2013-12-14 17:21:47
mageia
mageia
Updated openttd package fixes security vulnerability
2013-12-07 01:42:45
freebsd
freebsd
OpenTTD -- Denial of service using forcefully crashed aircrafts
2013-11-28 00:00:00
cve
cve
CVE-2013-6411
2013-12-14 17:21:47
prion
prion
Out-of-bounds
2013-12-14 17:21:00
debiancve
debiancve
CVE-2013-6411
2013-12-14 17:21:47
osv
osv
openttd-1.6.1-1.1 on GA media
2024-06-15 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
AI Score
6.4
Confidence
Low
EPSS
0.046
Percentile
92.7%
Related for GLSA-201407-01