CVE-2011-10020highCWE-20

CVE-2011-10020: high-severity vulnerability in Kaillera Project Server

Kaillera 0.86 Server DoS via Malformed UDP Packet

Published · Updated

Follow this CVE+ Monitor Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

36Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendcvss 8.7epss 1.3%
from disclosure to weaponsame day
Published on NVDAug 20
metasploitJul 2
Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become unresponsive. This flaw stems from improper input validation in the server’s UDP packet handler, allowing unauthenticated remote attackers to disrupt service availability.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Kaillera Project · Server