Every CVE Search/ Get API key

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small...

5.0 MediumPublic exploit

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.

Exploit likelihood

6.20%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.

Record
CVE-2003-1354
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.

Record
CVE-2003-1354
Updated
2026-11-02
EUVDEUVD-2003-1344 No score

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.

Record
EUVD-2003-1344
Updated
2026-11-03
GitHub AdvisoriesGHSA-4vv4-wwgv-w267 No score

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small...

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942.

Record
GHSA-4vv4-wwgv-w267
Weakness
CWE-119
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBGameSpy 3D 2.62 - Packet Amplification Denial of Service2003-01-17

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1354 is a medium vulnerability (CVSS 5.0) in Gamespy3d Gamespy 3d, published December 31, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.20%, the 93rd percentile. No source names a fixed version.

References

MoveEnter Open