oss-security - Re: CVE request for OpenTTD

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1126769415.1017381289842951080.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 15 Nov 2010 12:42:31 -0500 (EST)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com, rubidium@...nttd.org
Cc: coley <coley@...re.org>
Subject: Re: CVE request for OpenTTD


----- "Rubidium" <rubidium@...nttd.org> wrote:

> Hi folks,
> 
> we, the OpenTTD developers, have identified a security vulnerability
> in
> OpenTTD (an open source game with multiplayer). Would you be so kind
> as 
> to allocate a CVE id for this issue?
> 
> The issue concerns a denial of service vulnerability in the form of 
> reading and writing already freed memory. The first vulnerable version
> 
> is 1.0.0, the upcoming 1.0.5 release will have the issue fixed.
> 
> Once a CVE id is allocated, the issue will be documented at
> http://security.openttd.org/CVE-2010-xxxx
> 
> Thanks in advance,
> Remko 'Rubidium' Bijker
> 
> (Please CC me, I'm not subscribed)

Please use CVE-2010-4168.

Thanks.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.