CVE-2013-6411: Buffer Overflow

Published Dec 14, 2013

Updated

The HandleCrashedAircraft function in aircraftcmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.

Affected Software

53 affected components

OpenTTD OpenTTD=0.3.6

OpenTTD OpenTTD=0.4.0

OpenTTD OpenTTD=0.4.0.1

OpenTTD OpenTTD=0.4.5

OpenTTD OpenTTD=0.4.6

OpenTTD OpenTTD=0.4.7

OpenTTD OpenTTD=0.4.8

OpenTTD OpenTTD=0.5.0

OpenTTD OpenTTD=0.5.1

OpenTTD OpenTTD=0.5.2

OpenTTD OpenTTD=0.5.3

OpenTTD OpenTTD=0.6.0

OpenTTD OpenTTD=0.6.1

OpenTTD OpenTTD=0.6.2

OpenTTD OpenTTD=0.6.3

OpenTTD OpenTTD=0.7.0

OpenTTD OpenTTD=0.7.1

OpenTTD OpenTTD=0.7.2

OpenTTD OpenTTD=0.7.3

OpenTTD OpenTTD=0.7.4

OpenTTD OpenTTD=0.7.5

OpenTTD OpenTTD=1.0.0

OpenTTD OpenTTD=1.0.0-beta1

OpenTTD OpenTTD=1.0.0-beta2

OpenTTD OpenTTD=1.0.0-beta3

OpenTTD OpenTTD=1.0.0-beta4

OpenTTD OpenTTD=1.0.0-rc1

OpenTTD OpenTTD=1.0.0-rc2

OpenTTD OpenTTD=1.0.0-rc3

OpenTTD OpenTTD=1.0.1

OpenTTD OpenTTD=1.0.1-rc1

OpenTTD OpenTTD=1.0.1-rc2

OpenTTD OpenTTD=1.0.2

OpenTTD OpenTTD=1.0.2-rc1

OpenTTD OpenTTD=1.0.3

OpenTTD OpenTTD=1.0.3-rc1

OpenTTD OpenTTD=1.0.4

OpenTTD OpenTTD=1.0.4-rc1

OpenTTD OpenTTD=1.0.5

OpenTTD OpenTTD=1.0.5-rc1

OpenTTD OpenTTD=1.0.5-rc2

OpenTTD OpenTTD=1.1.0

OpenTTD OpenTTD=1.1.1

OpenTTD OpenTTD=1.1.2

OpenTTD OpenTTD=1.1.3

OpenTTD OpenTTD=1.1.4

OpenTTD OpenTTD=1.1.5

OpenTTD OpenTTD=1.2.0

OpenTTD OpenTTD=1.2.1

OpenTTD OpenTTD=1.2.2

OpenTTD OpenTTD=1.2.3

OpenTTD OpenTTD=1.3.1

OpenTTD OpenTTD=1.3.2

Remediation

Patch Available

http://vcs.openttd.org/svn/changeset/26134

Event History

Dec 14, 2013

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Data Sourced

via NVD·05:21 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2013-6411?

CVE-2013-6411 has a severity classification that indicates it can cause a denial of service due to an out-of-bounds read.

How do I fix CVE-2013-6411?

To fix CVE-2013-6411, users should upgrade to a version of OpenTTD that is above 1.3.2, which contains the necessary patches.

What versions of OpenTTD are affected by CVE-2013-6411?

CVE-2013-6411 affects OpenTTD versions from 0.3.6 up to 1.3.2 inclusively.

What type of vulnerability is CVE-2013-6411?

CVE-2013-6411 is classified as a denial of service vulnerability.

Can CVE-2013-6411 be exploited remotely?

Yes, CVE-2013-6411 can be exploited remotely by crashing an aircraft outside of the map.