A vulnerability in OpenTTD could allow a remote attacker to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| games-simulation/openttd | * | < 1.3.3 | >= 1.3.3 |
OpenTTD is a clone of Transport Tycoon Deluxe.
The vulnerability is caused due to missing out-of-bound check within the “HandleCrashedAircraft()” function.
A remote attacker could possibly cause a Denial of Service condition.
There is no known workaround at this time.
All OpenTTD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=games-simulation/openttd-1.3.3"
Multiple vulnerabilities were found in OpenTTD which could lead to execution of arbitrary code, a Denial of Service, or privilege escalation.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| games-simulation/openttd | * | < 1.1.3 | >= 1.1.3 |
OpenTTD is a clone of Transport Tycoon Deluxe.
Multiple vulnerabilities have been discovered in OpenTTD. Please review the CVE identifiers referenced below for details.
A remote attacker could execute arbitrary code with the privileges of the OpenTTD process or cause a Denial of Service. Local users could cause a Denial of Service.
There is no known workaround at this time.
All OpenTTD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=games-simulation/openttd-1.1.3"
NOTE: This is a legacy GLSA. Updates for all affected architectures are available since September 27, 2011. It is likely that your system is already no longer affected by this issue.
Multiple buffer overflows in OpenTTD might allow for the execution of arbitrary code in the server.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| games-simulation/openttd | * | < 0.6.3 | >= 0.6.3 |
OpenTTD is a clone of Transport Tycoon Deluxe.
Multiple buffer overflows have been reported in OpenTTD, when storing long for client names (CVE-2008-3547), in the TruncateString function in src/gfx.cpp (CVE-2008-3576) and in src/openttd.cpp when processing a large filename supplied to the "-g" parameter in the ttd_main function (CVE-2008-3577).
An authenticated attacker could exploit these vulnerabilities to execute arbitrary code with the privileges of the OpenTTD server.
There is no known workaround at this time.
All OpenTTD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=games-simulation/openttd-0.6.3"
The OpenTTD server is vulnerable to a remote Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| games-simulation/openttd | * | < 0.4.8 | >= 0.4.8 |
OpenTTD is a clone of Transport Tycoon Deluxe.
OpenTTD is vulnerable to a Denial of Service attack due to a flaw in the manner the game server handles errors in command packets.
An authenticated attacker can cause a Denial of Service by sending an invalid error number to a vulnerable OpenTTD server.
There is no known workaround at this time.
All OpenTTD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=games-simulation/openttd-0.4.8"
OpenTTD is vulnerable to format string vulnerabilities which may result in remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| games-simulation/openttd | * | < 0.4.0.1-r1 | >= 0.4.0.1-r1 |
OpenTTD is an open source clone of the simulation game "Transport Tycoon Deluxe" by Microprose.
Alexey Dobriyan discovered several format string vulnerabilities in OpenTTD.
A remote attacker could exploit these vulnerabilities to crash the OpenTTD server or client and possibly execute arbitrary code with the rights of the user running OpenTTD.
There are no known workarounds at this time.
All OpenTTD users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=games-simulation/openttd-0.4.0.1-r1"