CVE-2012-0048: Medium severity OpenTTD OpenTTD vulnerability
Published Aug 25, 2012
·Updated
OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service (game pause) by connecting to the server and not finishing the (1) authorization phase or (2) map download, aka a "slow read" attack.
Affected Software
85 affected components
OpenTTD OpenTTD=0.3.5
OpenTTD OpenTTD=0.3.6
OpenTTD OpenTTD=0.3.7
OpenTTD OpenTTD=0.4.0
OpenTTD OpenTTD=0.4.0.1
OpenTTD OpenTTD=0.4.5
OpenTTD OpenTTD=0.4.6
OpenTTD OpenTTD=0.4.7
OpenTTD OpenTTD=0.4.8
OpenTTD OpenTTD=0.4.8-rc1
OpenTTD OpenTTD=0.4.8-rc2
OpenTTD OpenTTD=0.5.0
OpenTTD OpenTTD=0.5.0-rc1
OpenTTD OpenTTD=0.5.0-rc2
OpenTTD OpenTTD=0.5.0-rc3
OpenTTD OpenTTD=0.5.0-rc4
OpenTTD OpenTTD=0.5.0-rc5
OpenTTD OpenTTD=0.5.1
OpenTTD OpenTTD=0.5.1-rc1
OpenTTD OpenTTD=0.5.1-rc2
OpenTTD OpenTTD=0.5.1-rc3
OpenTTD OpenTTD=0.5.2
OpenTTD OpenTTD=0.5.2-rc1
OpenTTD OpenTTD=0.5.3
OpenTTD OpenTTD=0.5.3-rc1
OpenTTD OpenTTD=0.5.3-rc2
OpenTTD OpenTTD=0.5.3-rc3
OpenTTD OpenTTD=0.6.0
OpenTTD OpenTTD=0.6.0-beta1
OpenTTD OpenTTD=0.6.0-beta2
OpenTTD OpenTTD=0.6.0-beta3
OpenTTD OpenTTD=0.6.0-beta4
OpenTTD OpenTTD=0.6.0-beta5
OpenTTD OpenTTD=0.6.0-rc1
OpenTTD OpenTTD=0.6.1
OpenTTD OpenTTD=0.6.1-rc1
OpenTTD OpenTTD=0.6.1-rc2
OpenTTD OpenTTD=0.6.2
OpenTTD OpenTTD=0.6.2-rc1
OpenTTD OpenTTD=0.6.2-rc2
OpenTTD OpenTTD=0.6.2-rc1
OpenTTD OpenTTD=0.6.2-rc2
OpenTTD OpenTTD=0.6.3
OpenTTD OpenTTD=0.6.3-rc1
OpenTTD OpenTTD=0.7.0
OpenTTD OpenTTD=0.7.0-beta1
OpenTTD OpenTTD=0.7.0-beta2
OpenTTD OpenTTD=0.7.0-rc1
OpenTTD OpenTTD=0.7.0-rc2
OpenTTD OpenTTD=0.7.1
OpenTTD OpenTTD=0.7.1-rc1
OpenTTD OpenTTD=0.7.1-rc2
OpenTTD OpenTTD=0.7.1-rc3
OpenTTD OpenTTD=0.7.2
OpenTTD OpenTTD=0.7.2-rc1
OpenTTD OpenTTD=0.7.2-rc2
OpenTTD OpenTTD=0.7.3
OpenTTD OpenTTD=0.7.3-rc1
OpenTTD OpenTTD=0.7.3-rc2
OpenTTD OpenTTD=0.7.4
OpenTTD OpenTTD=0.7.4-rc1
OpenTTD OpenTTD=0.7.5
OpenTTD OpenTTD=0.7.5-rc1
OpenTTD OpenTTD=1.0.0
OpenTTD OpenTTD=1.0.0-beta1
OpenTTD OpenTTD=1.0.0-beta2
OpenTTD OpenTTD=1.0.0-beta3
OpenTTD OpenTTD=1.0.0-beta4
OpenTTD OpenTTD=1.0.0-rc1
OpenTTD OpenTTD=1.0.0-rc2
OpenTTD OpenTTD=1.0.0-rc3
OpenTTD OpenTTD=1.0.1
OpenTTD OpenTTD=1.0.1-rc1
OpenTTD OpenTTD=1.0.1-rc2
OpenTTD OpenTTD=1.0.2
OpenTTD OpenTTD=1.0.2-rc1
OpenTTD OpenTTD=1.0.3
OpenTTD OpenTTD=1.0.3-rc1
OpenTTD OpenTTD=1.0.4
OpenTTD OpenTTD=1.0.4-rc1
OpenTTD OpenTTD=1.0.5
OpenTTD OpenTTD=1.0.5-rc1
OpenTTD OpenTTD=1.0.5-rc2
OpenTTD OpenTTD=1.1.3
OpenTTD OpenTTD=1.1.4
Remediation
Patch Available
Event History
Aug 25, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0048?
CVE-2012-0048 has a medium severity rating due to its potential to cause a denial of service.
2
How does CVE-2012-0048 affect OpenTTD servers?
CVE-2012-0048 allows attackers to disrupt gameplay by pausing the game through a slow read attack during the authorization and map download phases.
3
What versions of OpenTTD are affected by CVE-2012-0048?
CVE-2012-0048 affects OpenTTD versions from 0.3.5 to 1.1.4.
4
How do I fix CVE-2012-0048?
To fix CVE-2012-0048, upgrade your OpenTTD installation to version 1.1.5 or later.
5
Can CVE-2012-0048 impact multiplayer gameplay?
Yes, CVE-2012-0048 can significantly impact multiplayer gameplay by causing denial of service through server interruptions.