CVE-2026-33250
freeciv - security update
7.5
HIGH
CVSS 3.1
EPSS 0.82%
描述
Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player's machine. Authentication is not needed and, by default, logs do not contain any useful information. All users should upgrade to Freeciv21 version 3.1.1. Running the server behind a firewall can help mitigate the issue for non-public servers. For local games, Freeciv21 restricts connections to the current user and is therefore not affected.
如何修補 CVE-2026-33250
要修補 CVE-2026-33250,請將受影響套件升級到下列已修補版本。
- —未列出修補版本
- —升級至 3.0.6-1+deb12u1 或更新版本
CVE-2026-33250 正在被利用嗎?
低 — EPSS 為 0.8%,目前沒有觀察到大規模利用活動。
受影響套件(2)
- from 0
- from 0, < 3.0.6-1+deb12u1
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |