Search

Find a vulnerability

Search criteria

    4 vulnerabilities by freeciv

    CVE-2026-90557 (GCVE-0-2026-90557)

    Vulnerability from cvelistv5 – Published: 2026-09-12 18:06 – Updated: 2026-09-15 17:08
    VLAI
    Title
    Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame
    Summary
    Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded.
    Severity
    6.9 (Medium)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
    6.1 (Medium)
    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-15 17:08 UTC
    CWE
    Assigner
    VulnCheck CNA
    References
    Impacted products
    Vendor Product Version
    freeciv freeciv Affected: 3.1.0 , < 3.2.6 (semver)
        cpe:2.3:a:freeciv:freeciv:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-08-23 00:00
    Credits
    Tristan Madani
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-90557",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-15T17:08:35.732761Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-15T17:08:59.234Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "freeciv",
          "repo": "https://github.com/freeciv/freeciv",
          "vendor": "freeciv",
          "versions": [
            {
              "lessThan": "3.2.6",
              "status": "affected",
              "version": "3.1.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:freeciv:freeciv:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.6",
                  "versionStartIncluding": "3.1.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tristan Madani"
        }
      ],
      "datePublic": "2026-08-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Freeciv versions 3.1.0 through 3.2.5 contain an out-of-bounds read vulnerability in sg_load_player_unit() when processing savegame files with invalid unit activity indices. An attacker can craft a malicious savegame file with an out-of-range activity index that bypasses bounds checking and causes a crash or limited heap memory exposure when loaded."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 6.9,
            "baseSeverity": "MEDIUM",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-12T18:06:41.706Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/freeciv/freeciv/commit/ef0c76c2765fe383140eb1a70dbea1228844152e"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/freeciv/freeciv"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://redmine.freeciv.org/issues/2162"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/freeciv/freeciv/blob/R3_2_5/server/savegame/savegame3.c#L6108"
        },
        {
          "name": "freeciv R3_2_6 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/freeciv/freeciv/releases/tag/R3_2_6"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/freeciv/freeciv/blob/R3_2_5/server/savegame/savegame2.c#L4282"
        },
        {
          "name": "VulnCheck Advisory: Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/freeciv-3.1.0-through-3.2.5-out-of-bounds-read-via-savegame"
        }
      ],
      "title": "Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-90557",
    "datePublished": "2026-09-12T18:06:41.706Z",
    "dateReserved": "2026-09-12T11:13:43.326Z",
    "dateUpdated": "2026-09-15T17:08:59.234Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2026-90556 (GCVE-0-2026-90556)

    Vulnerability from cvelistv5 – Published: 2026-09-12 18:06 – Updated: 2026-09-18 17:23
    VLAI
    Title
    Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
    Summary
    Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, potentially corrupting memory when a user or server operator loads the file.
    Severity
    8.5 (High)
    CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    7.8 (High)
    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-09-18 17:12 UTC
    CWE
    • CWE-122 - Heap-based Buffer Overflow
    Assigner
    VulnCheck CNA
    References
    Impacted products
    Vendor Product Version
    freeciv freeciv Affected: 0 , < 3.2.6 (semver)
        cpe:2.3:a:freeciv:freeciv:*:*:*:*:*:*:*:*
    		Create a notification for this product.
    Date Public
    2026-08-23 00:00
    Credits
    Tristan Madani
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-90556",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-09-18T17:12:30.735572Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-09-18T17:23:06.892Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "freeciv",
          "repo": "https://github.com/freeciv/freeciv",
          "vendor": "freeciv",
          "versions": [
            {
              "lessThan": "3.2.6",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:freeciv:freeciv:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "3.2.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Tristan Madani"
        }
      ],
      "datePublic": "2026-08-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entries array into adjacent heap-allocated struct fields, potentially corrupting memory when a user or server operator loads the file."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "PASSIVE",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "HIGH",
            "vulnIntegrityImpact": "HIGH"
          },
          "format": "CVSS"
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-12T18:06:41.013Z",
        "orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
        "shortName": "VulnCheck"
      },
      "references": [
        {
          "name": "Patch Commit",
          "tags": [
            "patch"
          ],
          "url": "https://github.com/freeciv/freeciv/commit/75ecde3e86ddf2fe775768450e9a290a4f4d4387"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/freeciv/freeciv"
        },
        {
          "tags": [
            "issue-tracking"
          ],
          "url": "https://redmine.freeciv.org/issues/2161"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/freeciv/freeciv/blob/R3_2_5/server/savegame/savegame3.c#L964"
        },
        {
          "name": "freeciv R3_2_6 Release Notes",
          "tags": [
            "release-notes"
          ],
          "url": "https://github.com/freeciv/freeciv/releases/tag/R3_2_6"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://github.com/freeciv/freeciv/blob/R3_2_5/server/savegame/savegame2.c#L788"
        },
        {
          "name": "VulnCheck Advisory: Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://www.vulncheck.com/advisories/freeciv-before-3.2.6-heap-buffer-overflow-via-worklist-load"
        }
      ],
      "title": "Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load",
      "x_generator": {
        "engine": "vulncheck-endgame"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
    "assignerShortName": "VulnCheck",
    "cveId": "CVE-2026-90556",
    "datePublished": "2026-09-12T18:06:41.013Z",
    "dateReserved": "2026-09-12T11:13:43.326Z",
    "dateUpdated": "2026-09-18T17:23:06.892Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

    CVE-2012-6083 (GCVE-0-2012-6083)

    Vulnerability from cvelistv5 – Published: 2020-01-23 17:57 – Updated: 2024-08-06 21:21
    VLAI
    Summary
    Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.
    Severity
    No CVSS data available.
    CWE
    • Other
    Assigner
    redhat CNA
    References
    Impacted products
    Vendor Product Version
    freeciv freeciv Affected: before 2.3.3
    		Create a notification for this product.
    Date Public
    2012-12-22 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:21:28.523Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/31/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://freeciv.fandom.com/wiki/NEWS-2.3.3"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeciv",
          "vendor": "freeciv",
          "versions": [
            {
              "status": "affected",
              "version": "before 2.3.3"
            }
          ]
        }
      ],
      "datePublic": "2012-12-22T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Other",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-23T17:57:06.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/12/31/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://freeciv.fandom.com/wiki/NEWS-2.3.3"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2012-6083",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "freeciv",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 2.3.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "freeciv"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.openwall.com/lists/oss-security/2012/12/31/2",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2012/12/31/2"
            },
            {
              "name": "https://freeciv.fandom.com/wiki/NEWS-2.3.3",
              "refsource": "MISC",
              "url": "https://freeciv.fandom.com/wiki/NEWS-2.3.3"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-6083",
    "datePublished": "2020-01-23T17:57:06.000Z",
    "dateReserved": "2012-12-06T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:21:28.523Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2012-5645 (GCVE-0-2012-5645)

    Vulnerability from cvelistv5 – Published: 2019-12-30 19:57 – Updated: 2024-08-06 21:14
    VLAI
    Summary
    A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.
    Severity
    No CVSS data available.
    CWE
    • DoS (memory exhaustion or excessive CPU consumption) via malformed network packets
    Assigner
    redhat CNA
    References
    Impacted products
    Vendor Product Version
    freeciv freeciv Affected: before 2.3.4
    		Create a notification for this product.
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:14:16.253Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://security-tracker.debian.org/tracker/CVE-2012-5645"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5645"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/security/cve/cve-2012-5645"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/18/5"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/31/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095378.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095381.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/096391.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/22/4"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/30/11"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2012/12/30/8"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/41352"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696306"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "freeciv",
          "vendor": "freeciv",
          "versions": [
            {
              "status": "affected",
              "version": "before 2.3.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "DoS (memory exhaustion or excessive CPU consumption) via malformed network packets",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2019-12-30T19:57:08.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://security-tracker.debian.org/tracker/CVE-2012-5645"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5645"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://access.redhat.com/security/cve/cve-2012-5645"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/12/18/5"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/12/31/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095378.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095381.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/096391.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/12/22/4"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/12/30/11"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2012/12/30/8"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securityfocus.com/bid/41352"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696306"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2012-5645",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "freeciv",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 2.3.4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "freeciv"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "DoS (memory exhaustion or excessive CPU consumption) via malformed network packets"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://security-tracker.debian.org/tracker/CVE-2012-5645",
              "refsource": "MISC",
              "url": "https://security-tracker.debian.org/tracker/CVE-2012-5645"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5645",
              "refsource": "MISC",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-5645"
            },
            {
              "name": "https://access.redhat.com/security/cve/cve-2012-5645",
              "refsource": "MISC",
              "url": "https://access.redhat.com/security/cve/cve-2012-5645"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2012/12/18/5",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2012/12/18/5"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2012/12/31/2",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2012/12/31/2"
            },
            {
              "name": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095378.html",
              "refsource": "MISC",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095378.html"
            },
            {
              "name": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095381.html",
              "refsource": "MISC",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/095381.html"
            },
            {
              "name": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/096391.html",
              "refsource": "MISC",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2013-January/096391.html"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2012/12/22/4",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2012/12/22/4"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2012/12/30/11",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2012/12/30/11"
            },
            {
              "name": "http://www.openwall.com/lists/oss-security/2012/12/30/8",
              "refsource": "MISC",
              "url": "http://www.openwall.com/lists/oss-security/2012/12/30/8"
            },
            {
              "name": "http://www.securityfocus.com/bid/41352",
              "refsource": "MISC",
              "url": "http://www.securityfocus.com/bid/41352"
            },
            {
              "name": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696306",
              "refsource": "MISC",
              "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=696306"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2012-5645",
    "datePublished": "2019-12-30T19:57:08.000Z",
    "dateReserved": "2012-10-24T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:14:16.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}