diff options
| author | kwm <kwm@FreeBSD.org> | 2010-08-22 20:30:06 +0800 |
|---|---|---|
| committer | kwm <kwm@FreeBSD.org> | 2010-08-22 20:30:06 +0800 |
| commit | 3bf9a6503ed47c87a0e7b49df039b5caff3701c0 (patch) | |
| tree | b5308a9f1025e14c5897437a4e35ed72c2ff089a /security | |
| parent | 02dace5ca4a46676d4ea87a239df030f8eb4fcd3 (diff) | |
| download | freebsd-ports-gnome-3bf9a6503ed47c87a0e7b49df039b5caff3701c0.tar.gz freebsd-ports-gnome-3bf9a6503ed47c87a0e7b49df039b5caff3701c0.tar.zst freebsd-ports-gnome-3bf9a6503ed47c87a0e7b49df039b5caff3701c0.zip | |
Add entry for OpenTTD denial of server vulnability.
Reviewed by: danfe@ (OpenTTD maintainer)
Diffstat (limited to 'security')
| -rw-r--r-- | security/vuxml/vuln.xml | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 6bb95b559fa2..b658d2d0264a 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,36 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="b6069837-aadc-11df-82df-0015f2db7bde"> + <topic>OpenTTD -- Denial of service (server) via infinite loop</topic> + <affects> + <package> + <name>openttd</name> + <range><gt>1.0.1</gt><lt>1.0.3</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>OpenTTD project reports:</p> + <blockquote cite="http://security.openttd.org/en/CVE-2010-2534"> + <p>When multiple commands are queued (at the server) for execution + in the next game tick and an client joins the server can get into + an infinite loop. With the default settings triggering this bug + is difficult (if not impossible), however the larger value of + the "frame_freq" setting is easier it is to trigger the bug. </p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2010-2534</cvename> + <url>http://security.openttd.org/en/CVE-2010-2534</url> + </references> + <dates> + <discovery>2010-06-27</discovery> + <entry>2010-08-22</entry> + </dates> + </vuln> + <vuln vid="67a1c3ae-ad69-11df-9be6-0015587e2cc1"> <topic>corkscrew -- buffer overflow vulnerability</topic> <affects> |