Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 125304 - <=games-strategy/freeciv-2.0.7 - remotely triggered oom condition
Summary: <=games-strategy/freeciv-2.0.7 - remotely triggered oom condition
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High minor (vote)
Assignee: Gentoo Security
Whiteboard: B3 [glsa] DerCorny
Depends on:
Reported: 2006-03-06 15:20 UTC by Carsten Lohrke (RETIRED)
Modified: 2006-03-16 02:15 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Note You need to log in before you can comment on or make changes to this bug.
Description Carsten Lohrke (RETIRED) gentoo-dev 2006-03-06 15:20:17 UTC
Freeciv supports both plain and compressed data (admins can disable
this feature only recompiling the server from the source code with
When the server receives a jumbo data (size set to 0xffff) it reads
the subsequent 32 bits number which identifies the size of the
compressed data.
Then it makes a signed comparison to know if the compressed size is
major than the data received, if the client uses a negative compressed
size value it will be able to elude this check.
After having substracted 6 bytes (header size) from this number the
server tries to allocate the memory needed for decompressing the data
which is fixed to 100 times this size.
If the memory cannot be allocated the server terminates or freezes
showing an out of memory message.
Comment 1 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-06 15:26:00 UTC
arches please test and mark stable, thank you.
Comment 2 Jason Wever (RETIRED) gentoo-dev 2006-03-06 19:56:47 UTC
I'm assuming you mean 2.0.8 here, but please use exact versions in the future to avoid any confusion.
Comment 3 Mr. Bones. (RETIRED) gentoo-dev 2006-03-06 21:41:00 UTC
x86 is stable.
Comment 4 Gustavo Zacarias (RETIRED) gentoo-dev 2006-03-07 09:06:18 UTC
Comment 5 Thierry Carrez (RETIRED) gentoo-dev 2006-03-07 13:31:28 UTC
Removing x86 which is already marked stable
Comment 6 Joe Jezak (RETIRED) gentoo-dev 2006-03-07 19:04:46 UTC
Marked ppc stable by Pylon, tested by mabi.
Comment 7 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-08 00:37:45 UTC
removing ppc from CC because of comment #6
Comment 8 Jose Luis Rivero (yoswink) (RETIRED) gentoo-dev 2006-03-09 03:42:56 UTC
alpha is always ready for fun! 

eer ... alpha stable.
Comment 9 Simon Stelling (RETIRED) gentoo-dev 2006-03-12 07:53:30 UTC
amd64 stable, sorry for the delay
Comment 10 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-12 07:57:33 UTC
No RCE, no critical service - tend to say no here
Comment 11 Mr. Bones. (RETIRED) gentoo-dev 2006-03-12 09:13:44 UTC
2.0.7 has been removed from portage.
Comment 12 Thierry Carrez (RETIRED) gentoo-dev 2006-03-12 10:49:18 UTC
Bad players can kill the game server, I tend to vote yes, so we'll need one more opinion :) We usually don't issue GLSAs for game servers DoS though.
Comment 13 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-12 12:15:23 UTC
Ah well, you know what: i happened to have some spare time to draft and you are the leader, so i'll follow you - let's have a glsa.
Comment 14 Stefan Cornelius (RETIRED) gentoo-dev 2006-03-16 02:15:10 UTC
GLSA 200603-11

Thanks everybody.