CVE-2012-5645: falha em freeciv
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 4.3%
A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.
Produtos afetados
freeciv · freecivCVEs relacionadas — freeciv
No mesmo produto, das mais perigosas para as menos.
Referências
http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095378.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-January/095381.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2013-January/096391.htmlhttps://access.redhat.com/security/cve/cve-2012-5645https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696306https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5645https://security-tracker.debian.org/tracker/CVE-2012-5645http://www.openwall.com/lists/oss-security/2012/12/18/5http://www.openwall.com/lists/oss-security/2012/12/22/4http://www.openwall.com/lists/oss-security/2012/12/30/11http://www.openwall.com/lists/oss-security/2012/12/30/8http://www.openwall.com/lists/oss-security/2012/12/31/2