Vulnerability in Openttd

CVE-2010-2534

The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue.

EPSS: 0.033 (87.4th percentile) — read the EPSS interpretation.

Affected products

  • Openttd — versions 0.1.2, 1.0.0, 0.7.3
  • N/a — versions n/a

Weakness classification (CWE)

References