CVE-2007-4755 Denial of service in n/a

Medium 5.0 Published Updated

Remote attackers can cause client disconnection in Alien Arena by sending forged server packets, requiring an upgrade to fix.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
Available

What is CVE-2007-4755?

CVE-2007-4755 is a medium-severity denial of service vulnerability in n/a, published on 8 Sep 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (client disconnect) by sending a client_connect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries.

Weakness: CWE-20

Which versions are affected by CVE-2007-4755?

It affects 1 product.

Products include Cor Entertainment Alien Arena 2007.

How do I fix CVE-2007-4755?

Upgrade to a fixed version.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2007-4755 being exploited?

There is no known exploitation of CVE-2007-4755 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2007-4755, GHSA-xg3j-x27h-qh5w.

Is CVE-2007-4755 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free