VULNERABILITY INTELLIGENCE
CVE-2010-5077
CVSS score7.8 HIGH
EPSS probability2.11%
CISA KEVNot currently listed
Published2014-10-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.
Weakness classification
- CWE-20: Improper Input Validation