CVE-2010-2534
First published: Tue Jul 27 2010(Updated: )
The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openttd Openttd | =1.0.0-beta2 | |
| Openttd Openttd | =0.6.0-rc1 | |
| Openttd Openttd | =0.7.3-rc1 | |
| Openttd Openttd | =0.1.3 | |
| Openttd Openttd | =0.7.3 | |
| Openttd Openttd | =0.1.2 | |
| Openttd Openttd | =1.0.0 | |
| Openttd Openttd | =0.4.8-rc2 | |
| Openttd Openttd | =1.0.0-beta4 | |
| Openttd Openttd | =0.7.0 | |
| Openttd Openttd | =0.6.3-rc1 | |
| Openttd Openttd | =0.2.1 | |
| Openttd Openttd | =0.4.0.1 | |
| Openttd Openttd | =0.2.0 | |
| Openttd Openttd | =0.6.1-rc2 | |
| Openttd Openttd | =0.6.0-beta2 | |
| Openttd Openttd | =0.5.0-rc1 | |
| Openttd Openttd | =0.7.1-rc3 | |
| Openttd Openttd | =0.3.3 | |
| Openttd Openttd | =0.3.1 | |
| Openttd Openttd | =0.5.3-rc1 | |
| Openttd Openttd | =0.7.2 | |
| Openttd Openttd | =0.4.7 | |
| Openttd Openttd | =0.3.6 | |
| Openttd Openttd | =0.7.2-rc1 | |
| Openttd Openttd | =0.3.4 | |
| Openttd Openttd | =0.7.0-beta1 | |
| Openttd Openttd | =0.5.0-rc2 | |
| Openttd Openttd | =1.0.0-rc2 | |
| Openttd Openttd | =1.0.1-rc2 | |
| Openttd Openttd | =0.6.0 | |
| Openttd Openttd | =0.1.4 | |
| Openttd Openttd | =1.0.1-rc1 | |
| Openttd Openttd | =0.6.0-beta1 | |
| Openttd Openttd | =0.3.0 | |
| Openttd Openttd | =0.7.1-rc2 | |
| Openttd Openttd | =0.7.5 | |
| Openttd Openttd | =0.5.3 | |
| Openttd Openttd | =0.7.3-rc2 | |
| Openttd Openttd | =0.5.0-rc3 | |
| Openttd Openttd | =0.5.0 | |
| Openttd Openttd | =0.5.3-rc3 | |
| Openttd Openttd | =0.7.1 | |
| Openttd Openttd | =0.4.0 | |
| Openttd Openttd | =1.0.0-beta3 | |
| Openttd Openttd | =0.7.4-rc1 | |
| Openttd Openttd | =0.5.2 | |
| Openttd Openttd | =0.6.1 | |
| Openttd Openttd | =0.7.0-rc2 | |
| Openttd Openttd | =1.0.0-rc1 | |
| Openttd Openttd | =0.7.0-rc1 | |
| Openttd Openttd | =0.6.0-beta4 | |
| Openttd Openttd | =0.5.2-rc1 | |
| Openttd Openttd | =0.7.0-beta2 | |
| Openttd Openttd | =0.6.0-beta3 | |
| Openttd Openttd | =1.0.0-beta1 | |
| Openttd Openttd | =0.6.1-rc1 | |
| Openttd Openttd | =0.4.5 | |
| Openttd Openttd | =0.5.1-rc1 | |
| Openttd Openttd | =0.4.6 | |
| Openttd Openttd | =0.6.2-rc1 | |
| Openttd Openttd | =0.5.3-rc2 | |
| Openttd Openttd | =0.3.2 | |
| Openttd Openttd | =0.7.4 | |
| Openttd Openttd | =1.0.3-rc1 | |
| Openttd Openttd | =0.1.1 | |
| Openttd Openttd | =1.0.2-rc1 | |
| Openttd Openttd | =0.5.0-rc4 | |
| Openttd Openttd | =0.4.8 | |
| Openttd Openttd | =0.3.7 | |
| Openttd Openttd | =0.5.1 | |
| Openttd Openttd | =1.0.1 | |
| Openttd Openttd | =0.5.1-rc2 | |
| Openttd Openttd | =0.5.0-rc5 | |
| Openttd Openttd | =0.3.5 | |
| Openttd Openttd | =0.6.2 | |
| Openttd Openttd | =0.3.2.1 | |
| Openttd Openttd | =0.6.3 | |
| Openttd Openttd | =0.6.0-beta5 | |
| Openttd Openttd | =0.7.2-rc2 | |
| Openttd Openttd | =0.7.5-rc1 | |
| Openttd Openttd | =0.5.1-rc3 | |
| Openttd Openttd | =1.0.2 | |
| Openttd Openttd | =0.6.2-rc2 | |
| Openttd Openttd | =0.4.8-rc1 | |
| Openttd Openttd | =0.7.1-rc1 | |
| Openttd Openttd | =1.0.0-rc3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.vupen.com/english/advisories/2010/1916
- http://www.vupen.com/english/advisories/2010/1888
- http://osvdb.org/66503
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044516.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044565.html
- http://www.securityfocus.com/bid/41804
- http://bugs.openttd.org/task/3909/getfile/6237/loop_fix.patch
- http://bugs.openttd.org/task/3909
- http://secunia.com/advisories/40630
- http://security.openttd.org/en/CVE-2010-2534
- http://secunia.com/advisories/40760
- http://www.openwall.com/lists/oss-security/2010/07/20/1
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60568
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/remedy
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/openttd
- canonical/openttd openttd
- version/openttd openttd/1.0.0-beta2
- version/openttd openttd/0.6.0-rc1
- version/openttd openttd/0.7.3-rc1
- version/openttd openttd/0.1.3
- version/openttd openttd/0.7.3
- version/openttd openttd/0.1.2
- version/openttd openttd/1.0.0
- version/openttd openttd/0.4.8-rc2
- version/openttd openttd/1.0.0-beta4
- version/openttd openttd/0.7.0
- version/openttd openttd/0.6.3-rc1
- version/openttd openttd/0.2.1
- version/openttd openttd/0.4.0.1
- version/openttd openttd/0.2.0
- version/openttd openttd/0.6.1-rc2
- version/openttd openttd/0.6.0-beta2
- version/openttd openttd/0.5.0-rc1
- version/openttd openttd/0.7.1-rc3
- version/openttd openttd/0.3.3
- version/openttd openttd/0.3.1
- version/openttd openttd/0.5.3-rc1
- version/openttd openttd/0.7.2
- version/openttd openttd/0.4.7
- version/openttd openttd/0.3.6
- version/openttd openttd/0.7.2-rc1
- version/openttd openttd/0.3.4
- version/openttd openttd/0.7.0-beta1
- version/openttd openttd/0.5.0-rc2
- version/openttd openttd/1.0.0-rc2
- version/openttd openttd/1.0.1-rc2
- version/openttd openttd/0.6.0
- version/openttd openttd/0.1.4
- version/openttd openttd/1.0.1-rc1
- version/openttd openttd/0.6.0-beta1
- version/openttd openttd/0.3.0
- version/openttd openttd/0.7.1-rc2
- version/openttd openttd/0.7.5
- version/openttd openttd/0.5.3
- version/openttd openttd/0.7.3-rc2
- version/openttd openttd/0.5.0-rc3
- version/openttd openttd/0.5.0
- version/openttd openttd/0.5.3-rc3
- version/openttd openttd/0.7.1
- version/openttd openttd/0.4.0
- version/openttd openttd/1.0.0-beta3
- version/openttd openttd/0.7.4-rc1
- version/openttd openttd/0.5.2
- version/openttd openttd/0.6.1
- version/openttd openttd/0.7.0-rc2
- version/openttd openttd/1.0.0-rc1
- version/openttd openttd/0.7.0-rc1
- version/openttd openttd/0.6.0-beta4
- version/openttd openttd/0.5.2-rc1
- version/openttd openttd/0.7.0-beta2
- version/openttd openttd/0.6.0-beta3
- version/openttd openttd/1.0.0-beta1
- version/openttd openttd/0.6.1-rc1
- version/openttd openttd/0.4.5
- version/openttd openttd/0.5.1-rc1
- version/openttd openttd/0.4.6
- version/openttd openttd/0.6.2-rc1
- version/openttd openttd/0.5.3-rc2
- version/openttd openttd/0.3.2
- version/openttd openttd/0.7.4
- version/openttd openttd/1.0.3-rc1
- version/openttd openttd/0.1.1
- version/openttd openttd/1.0.2-rc1
- version/openttd openttd/0.5.0-rc4
- version/openttd openttd/0.4.8
- version/openttd openttd/0.3.7
- version/openttd openttd/0.5.1
- version/openttd openttd/1.0.1
- version/openttd openttd/0.5.1-rc2
- version/openttd openttd/0.5.0-rc5
- version/openttd openttd/0.3.5
- version/openttd openttd/0.6.2
- version/openttd openttd/0.3.2.1
- version/openttd openttd/0.6.3
- version/openttd openttd/0.6.0-beta5
- version/openttd openttd/0.7.2-rc2
- version/openttd openttd/0.7.5-rc1
- version/openttd openttd/0.5.1-rc3
- version/openttd openttd/1.0.2
- version/openttd openttd/0.6.2-rc2
- version/openttd openttd/0.4.8-rc1
- version/openttd openttd/0.7.1-rc1
- version/openttd openttd/1.0.0-rc3