CVE-2006-1103: Sauerbraten Cube

Medium severity, CVSS 5.0. EPSS: 7.2% chance of exploitation in the next 30 days.

engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.

Affected products

• Sauerbraten Cube: version 2005-08-09 only
• Sauerbraten Sauerbraten: version 2006-02-28 only

Published 2006-03-09. Last modified 2026-06-16.