CVE-2012-5645: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 4.3% chance of exploitation in the next 30 days.

A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets. A remote attacker could send a specially-crafted packet that, when processed would lead to memory exhaustion or excessive CPU consumption.

Affected products

• Fedoraproject Fedora: version 16 only; version 17 only; version 18 only
• Freeciv Freeciv: before 2.3.4 (fixed in 2.3.4)

Published 2019-12-30. Last modified 2026-06-16.