FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2010-2534

This CVE name corresponds to:

Entered	Topic
2010-08-22	OpenTTD -- Denial of service (server) via infinite loop

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2010-2534 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2010-2534
Phase	Assigned(20100630)

Description

The NetworkSyncCommandQueue function in network/network_command.cpp in OpenTTD before 1.0.3 does not properly clear a pointer in a linked list, which allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a crafted request, related to the client command queue.

References

Source	Reference
MLIST	[oss-security] 20100720 CVE request for OpenTTD
MISC	http://bugs.openttd.org/task/3909/getfile/6237/loop_fix.patch
CONFIRM	http://bugs.openttd.org/task/3909
CONFIRM	http://security.openttd.org/en/CVE-2010-2534
FEDORA	FEDORA-2010-11401
FEDORA	FEDORA-2010-11450
BID	41804
OSVDB	66503
SECUNIA	40630
SECUNIA	40760
VUPEN	ADV-2010-1888
VUPEN	ADV-2010-1916
XF	openttd-networksynccommandqueue-dos(60568)