Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

OpenTTD 1.1.3 and earlier: Daemon crash or code execution risk via crafted command

CVE-2011-3341 · published 15 years ago
Summary

A security issue in OpenTTD, a game server, can cause it to crash or potentially allow unauthorized access. This affects users who run the game server on their network, as it may allow hackers to disrupt the service or gain unauthorized access. Update to version 1.1.3 or later to fix the issue.

What to do
  • Update debian openttd to version 1.1.3-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian openttd < 1.1.3-1
Fix: upgrade to 1.1.3-1
Debian:12 debian openttd < 1.1.3-1
Fix: upgrade to 1.1.3-1
Debian:13 debian openttd < 1.1.3-1
Fix: upgrade to 1.1.3-1
– openttd openttd <= 1.1.2
0.1.1
0.1.2
0.1.3
0.1.4
0.2.0
0.2.1
0.3.0
0.3.1
0.3.2
0.3.2.1
0.3.3
33 more version ranges
cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*
Original advisory text
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_OR...
Multiple off-by-one errors in order_cmd.cpp in OpenTTD before 1.1.3 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted CMD_INSERT_ORDER command.
References
Severity
7.5 High
Exploitation
4% chance of attack within 30 days
Type
CWE-189Numeric Errors
Timeline
Published8 Sep 2011
Updated30 Oct 2026
First seen21 May 2026
Sources
DEBIAN-CVE-2011-3341 · OSV
CVE-2011-3341 · NVD
Track software like this
Free during beta