CVE-2012-3436
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which...
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
Exploit likelihood
What each source reports
NVD Score used
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
- Record
CVE-2012-3436- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
- Record
CVE-2012-3436- Updated
- 2026-11-02
EUVDEUVD-2012-3403 No score
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
- Record
EUVD-2012-3403- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jh92-gg4f-jqfw No score
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which...
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
- Record
GHSA-jh92-gg4f-jqfw- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
- Record
CVE-2012-3436- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-3436 No score
OpenTTD 0.6.0 through 1.2.1 does not properly validate requests to clear a water tile, which allows remote attackers to cause a denial of service (NULL pointer dereference and server crash) via a certain sequence of steps related to "the water/coast aspect of tiles which also have railtracks on one half."
- Record
DEBIAN-CVE-2012-3436- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10563-1 No score
openttd-1.6.1-1.1 on GA media
These are all security issues fixed in the openttd-1.6.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10563-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3436 is a medium vulnerability (CVSS 5.0) in Openttd, published August 6, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.38%, the 88th percentile. Fixed in openttd 1.2.1-2.
References
secunia.com/advisories/50042
security.openttd.org/en/CVE-2012-3436
openwall.com/lists/oss-security/2012/07/28/7
lists.opensuse.org/opensuse-updates/2012-08/msg00043.html
securityfocus.com/bid/54720
Show 12 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/77266
vcs.openttd.org/svn/changeset/24449
bugs.openttd.org/task/5254
nvd.nist.gov/vuln/detail/CVE-2012-3436
github.com/advisories/GHSA-jh92-gg4f-jqfw
security-tracker.debian.org/tracker/CVE-2012-3436
suse.com/security/cve/CVE-2010-4168