CVE DATABASE / CVE-2010-2534
CVE-2010-2534
CVSS 5 · MEDIUM
Summary
The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue.
CVSS 2.0 breakdown
| Base score | 5 (MEDIUM) |
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Attack vector | NETWORK |
| Attack complexity | LOW |
| Confidentiality | NONE |
| Integrity | NONE |
| Availability | PARTIAL |
Weakness type (CWE)
Affected products
Openttd openttd
Check this CVE live
Use our free CVE Lookup tool for the latest NVD record, or browse the full CISA KEV catalog.
References
- http://bugs.openttd.org/task/3909
- http://bugs.openttd.org/task/3909/getfile/6237/loop_fix.patch
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044516.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044565.html
- http://osvdb.org/66503
- http://secunia.com/advisories/40630
- http://secunia.com/advisories/40760
- http://security.openttd.org/en/CVE-2010-2534
- http://www.openwall.com/lists/oss-security/2010/07/20/1
- http://www.securityfocus.com/bid/41804
- http://www.vupen.com/english/advisories/2010/1888
- http://www.vupen.com/english/advisories/2010/1916
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60568
Data: NIST NVD. NVD last modified 2026-04-29. Always verify against the vendor advisory before acting.