Vulnerability Name:

CVE-2012-3436 (CCN-77266)

Assigned:2012-07-30
Published:2012-07-30
Updated:2017-08-29
Summary:OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P)
3.7 Low (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.3 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P)
3.2 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-20
Vulnerability Consequences:Denial of Service
References:Source: CONFIRM
Type: UNKNOWN
http://bugs.openttd.org/task/5254

Source: MITRE
Type: CNA
CVE-2012-3436

Source: SUSE
Type: UNKNOWN
openSUSE-SU-2012:1063

Source: CCN
Type: SA50042
OpenTTD Water Clearing Denial Of Service Vulnerability

Source: SECUNIA
Type: Vendor Advisory
50042

Source: CCN
Type: OpenTTD Web site
CVE-2012-3436 (vulnerable 0.6.0 - fixed 1.2.2)

Source: CONFIRM
Type: UNKNOWN
http://security.openttd.org/en/CVE-2012-3436

Source: CONFIRM
Type: UNKNOWN
http://vcs.openttd.org/svn/changeset/24439

Source: CONFIRM
Type: Exploit
http://vcs.openttd.org/svn/changeset/24449

Source: DEBIAN
Type: DSA-2524
openttd -- several vulnerabilities

Source: MLIST
Type: UNKNOWN
[oss-security] 20120727 CVE request for OpenTTD

Source: MLIST
Type: UNKNOWN
[oss-security] 20120728 Re: CVE request for OpenTTD

Source: MLIST
Type: UNKNOWN
[oss-security] 20120731 Re: CVE request for OpenTTD

Source: CCN
Type: OSVDB ID: 84314
OpenTTD Water Tile Clearing Request Parsing Remote DoS

Source: BID
Type: UNKNOWN
54720

Source: CCN
Type: BID-54720
OpenTTD 'Water Clearing' Feature Denial Of Service Vulnerability

Source: XF
Type: UNKNOWN
openttd-water-dos(77266)

Source: XF
Type: UNKNOWN
openttd-water-dos(77266)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:openttd:openttd:0.6.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.3:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.1:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.2:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.3:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.4:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.5:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.1:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.1:rc2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.2:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.3:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.4:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.5:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.5:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.5:rc2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.1:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.2:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.3:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.4:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.5:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.2.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.2.1:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:openttd:openttd:0.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.2:rc1:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.6.2:rc2:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:0.7.4:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:openttd:openttd:1.1.4:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20123436
    V
    		CVE-2012-3436
    2022-06-30
    oval:org.opensuse.security:def:113067
    P
    		openttd-1.6.1-1.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:106505
    P
    		openttd-1.6.1-1.1 on GA media (Moderate)
    2021-10-01
    oval:org.mitre.oval:def:18577
    P
    		DSA-2524-1 openttd - several
    2014-06-23
    oval:com.ubuntu.precise:def:20123436000
    V
    		CVE-2012-3436 on Ubuntu 12.04 LTS (precise) - medium.
    2012-10-09
    oval:com.ubuntu.trusty:def:20123436000
    V
    		CVE-2012-3436 on Ubuntu 14.04 LTS (trusty) - medium.
    2012-10-09
    oval:com.ubuntu.xenial:def:201234360000000
    V
    		CVE-2012-3436 on Ubuntu 16.04 LTS (xenial) - medium.
    2012-10-09
    oval:com.ubuntu.xenial:def:20123436000
    V
    		CVE-2012-3436 on Ubuntu 16.04 LTS (xenial) - medium.
    2012-10-09
    BACK
    openttd openttd 0.6.0
    openttd openttd 0.6.1
    openttd openttd 0.6.2
    openttd openttd 0.6.3
    openttd openttd 0.7.0
    openttd openttd 0.7.1
    openttd openttd 0.7.2
    openttd openttd 0.7.3
    openttd openttd 0.7.4
    openttd openttd 0.7.5
    openttd openttd 1.0.0
    openttd openttd 1.0.0 beta1
    openttd openttd 1.0.0 beta2
    openttd openttd 1.0.0 beta3
    openttd openttd 1.0.0 beta4
    openttd openttd 1.0.0 rc1
    openttd openttd 1.0.0 rc2
    openttd openttd 1.0.0 rc3
    openttd openttd 1.0.1
    openttd openttd 1.0.1 rc1
    openttd openttd 1.0.1 rc2
    openttd openttd 1.0.2
    openttd openttd 1.0.2 rc1
    openttd openttd 1.0.3
    openttd openttd 1.0.3 rc1
    openttd openttd 1.0.4
    openttd openttd 1.0.4 rc1
    openttd openttd 1.0.5
    openttd openttd 1.0.5 rc1
    openttd openttd 1.0.5 rc2
    openttd openttd 1.1.0
    openttd openttd 1.1.1
    openttd openttd 1.1.2
    openttd openttd 1.1.3
    openttd openttd 1.1.4
    openttd openttd 1.1.5
    openttd openttd 1.2.0
    openttd openttd 1.2.1
    openttd openttd 0.6.1
    openttd openttd 0.6.0
    openttd openttd 0.6.0 beta1
    openttd openttd 0.6.0 beta2
    openttd openttd 0.6.0 beta3
    openttd openttd 0.6.0 beta4
    openttd openttd 0.6.0 beta5
    openttd openttd 0.6.1 rc1
    openttd openttd 0.6.1 rc2
    openttd openttd 0.6.0 rc1
    openttd openttd 0.6.2 rc1
    openttd openttd 0.6.2 rc2
    openttd openttd 0.7.4
    openttd openttd 1.0.0
    openttd openttd 1.0.1
    openttd openttd 1.0.2
    openttd openttd 1.0.3
    openttd openttd 1.0.4
    openttd openttd 1.1.4