| Package | Affected versions | Patched versions |
|---|---|---|
| netrek vanilla server | = 2.12.0 |
Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the message handling.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free