oss-security - CVE request for OpenTTD

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 20 Jul 2010 09:59:11 +0200
From: Matthijs Kooijman <matthijs@...in.nl>
To: oss-security@...ts.openwall.com
Cc: rubidium@...nttd.org
Subject: CVE request for OpenTTD

Hi folks,

the OpenTTD developers have indentified a security vulnerability in the
OpenTTD program. Would you be so kind as to allocate a CVE id for this
issue?

The issue concerns a denial of service vulnerability, in the form of a
hard to trigger infinite loop. The issue is reported at
http://bugs.openttd.org/task/3909

The first vulnerable version is 1.0.1, the upcoming 1.0.3 release will
have the issue fixed.

Once a CVE id is allocated, the issue will be documented at
http://security.openttd.org/en/CVE-2010-xxxx

Thanks,

Matthijs

(Please CC me, I'm not subscribed)

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.