Candidate: CVE-2012-5645 PublicDate: 2019-12-30 20:15:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5645 http://www.openwall.com/lists/oss-security/2012/12/18 http://aluigi.altervista.org/adv/freecivet-adv.txt http://freeciv.wikia.com/wiki/NEWS-2.3.3 Description: A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption. Ubuntu-Description: Notes: Bugs: Priority: medium Discovered-by: Assigned-to: CVSS: nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH] Patches_freeciv: upstream_freeciv: released (2.3.3) hardy_freeciv: ignored (reached end-of-life) lucid_freeciv: ignored (reached end-of-life) oneiric_freeciv: ignored (reached end-of-life) precise_freeciv: ignored (reached end-of-life) precise/esm_freeciv: DNE (precise was needed) quantal_freeciv: ignored (reached end-of-life) raring_freeciv: ignored (reached end-of-life) saucy_freeciv: not-affected (2.3.4-1) trusty_freeciv: not-affected (2.4.2-1) trusty/esm_freeciv: DNE (trusty was not-affected [2.4.2-1]) utopic_freeciv: not-affected (2.4.2-1) vivid_freeciv: not-affected (2.4.2-1) vivid/stable-phone-overlay_freeciv: DNE vivid/ubuntu-core_freeciv: DNE wily_freeciv: not-affected (2.4.2-1) xenial_freeciv: not-affected (2.4.2-1) yakkety_freeciv: not-affected (2.4.2-1) zesty_freeciv: not-affected (2.4.2-1) devel_freeciv: not-affected (2.4.2-1)