« Volver al listado

CVE-2010-5077

Estado: ModificadaAlta (7.8)—

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

Ioquake3 — Ioquake3 EngineOpenarena — OpenarenaTremulous — Tremulous

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-5077",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "secalert@redhat.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-10-27T20:55:09.373",
  "references": [
    {
      "url": "http://openarena.ws/board/index.php?topic=4391.0",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://permalink.gmane.org/gmane.comp.games.ioquake3/961",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.debian.org/security/2012/dsa-2442",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.ioquake.org/forums/viewtopic.php?f=12&t=1694",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/03/26/5",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/522076",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://www.urbanterror.info/forums/topic/27825-drdos/",
      "source": "secalert@redhat.com"
    },
    {
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665656",
      "source": "secalert@redhat.com"
    },
    {
      "url": "http://openarena.ws/board/index.php?topic=4391.0",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://permalink.gmane.org/gmane.comp.games.ioquake3/961",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.debian.org/security/2012/dsa-2442",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ioquake.org/forums/viewtopic.php?f=12&t=1694",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openwall.com/lists/oss-security/2012/03/26/5",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/522076",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.urbanterror.info/forums/topic/27825-drdos/",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=665656",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request."
    },
    {
      "lang": "es",
      "value": "server/sv_main.c en Quake3 Arena, utilizado en ioquake3 anterior a r1762, OpenArena, Tremulous, y otros productos, permite a atacantes remotos causar una denegación de servicio (amplificación del trafico de red) a través de una solicitud (1) getstatus o (2) rcon falsificado."
    }
  ],
  "lastModified": "2026-06-16T23:26:05.680",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ioquake3:ioquake3_engine:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB04E5A7-1624-4001-BE7C-FDF25942162E",
              "versionEndIncluding": "r1761"
            },
            {
              "criteria": "cpe:2.3:a:openarena:openarena:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C66CEED6-0C18-4A8C-8369-2C8E23434587"
            },
            {
              "criteria": "cpe:2.3:a:tremulous:tremulous:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63624600-4577-4D6E-A733-1668CFD7732C"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "secalert@redhat.com"
}