Every CVESearch/Get API key

CVE-2010-5077

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and...

7.8 HighFix available

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Exploit likelihood

2.11%Up 0.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used7.8

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
CVE-2010-5077
CVSS 2.0
7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE ListNo score

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
CVE-2010-5077
Updated
2026-11-02
EUVDEUVD-2010-5041No score

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
EUVD-2010-5041
Updated
2026-11-03
GitHub AdvisoriesGHSA-hm3f-28vq-g8gmNo score

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and...

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
GHSA-hm3f-28vq-g8gm
Weakness
CWE-20
Updated
2026-11-02
OSVNo score

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
CVE-2010-5077
Updated
2026-11-02
OSVDEBIAN-CVE-2010-5077No score

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
DEBIAN-CVE-2010-5077
Updated
2026-11-02
OSVUBUNTU-CVE-2010-5077No score

server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of service (network traffic amplification) via a spoofed (1) getstatus or (2) rcon request.

Record
UBUNTU-CVE-2010-5077
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openarena
Debian:12
before 0.8.5-6
0.8.5-6
openarena
Debian:13
before 0.8.5-6
0.8.5-6
openarena
Debian:14
before 0.8.5-6
0.8.5-6
openarena
Debian:6.0
before 0.8.5-5+squeeze2, plus listed versions
0.8.5-50.8.5-5+exp10.8.5-5+exp20.8.5-5+exp30.8.5-5+squeeze1
0.8.5-5+squeeze2

History

History
RecordedChangedSources
facts
affected
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-5077 is a high vulnerability (CVSS 7.8) in Openarena, published March 26, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.11%, the 82nd percentile. Fixed in openarena 0.8.5-6.

References

Show 7 moreShow less
PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open