CVE-2004-0278
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then…
Does this matter?
Lower severity and a low EPSS score (1.70%). Track it; it rarely justifies an emergency change on its own.
Description
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 1.70% probability · 76th percentile
- CISA KEV
- Not listed
- Affected
- ratbag/dirt track racing · ratbag/dirt track racing australia · ratbag/dirt track racing sprint cars · ratbag/leadfoot · ratbag/world of outlaws sprint cars
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=107655269820530&w=2
- http://www.securityfocus.com/bid/9644Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15188
- http://marc.info/?l=bugtraq&m=107655269820530&w=2
- http://www.securityfocus.com/bid/9644Exploit, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15188
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.