Buffer Overflow in Freeciv's Modpack Installer Utility
CVE-2022-39047

8.8HIGH

Key Information:

Vendor

Freeciv

Status
Vendor
CVE Published:
31 August 2022

What is CVE-2022-39047?

Freeciv versions prior to 2.6.7 and 3.0.3 are vulnerable to a buffer overflow issue within the Modpack Installer utility. This vulnerability arises when the utility improperly handles modpack URLs, which can potentially lead to arbitrary code execution or crashes. Users of affected versions are encouraged to update to the latest releases to mitigate risks associated with this vulnerability.

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.