debian/crossfire vulnerabilities

Latest debian/crossfire CVEs

Newest publication first

1. DSA-1009-1 crossfire - buffer overflow

   Published 2006-03-21

   Unknown

2. CVE-2006-1236 Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1...

   Published 2006-03-15

   High·CVSS 7.5 EPSS 28.0%

   Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.

3. DSA-1001-1 crossfire - buffer overflow

   Published 2006-03-14

   Unknown

4. CVE-2006-1010 Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sen...

   Published 2006-03-06

   Medium·CVSS 6.4 EPSS 17.6% PoC

   Buffer overflow in socket/request.c in CrossFire before 1.9.0, when oldsocketmode is enabled, allows remote attackers to cause a denial of service (segmentation fault) and possibly execute code by sending the server a large request.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.