https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2006-1103.htmlhttps://patchthecve.com/cve/CVE-2006-1103.htmlTue, 16 Jun 2026 22:22:01 +0000MEDIUM 5.0: engine/server.cpp in Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (segmentation fault) via a client that does not completely join the game and times out, which results in a null pointer dereference.https://patchthecve.com/cve/CVE-2006-1102.htmlhttps://patchthecve.com/cve/CVE-2006-1102.htmlTue, 16 Jun 2026 22:22:01 +0000MEDIUM 5.0: Sauerbraten 2006_02_28, as derived from the Cube engine, allows remote attackers to cause a denial of service (client exit) by forcing the server to change to a map (ogz) file whose name contains ".." sequences and has a certain length that prevents the addition of the ".ogz" extension.https://patchthecve.com/cve/CVE-2006-1101.htmlhttps://patchthecve.com/cve/CVE-2006-1101.htmlTue, 16 Jun 2026 22:22:01 +0000MEDIUM 5.0: The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, whttps://patchthecve.com/cve/CVE-2006-1100.htmlhttps://patchthecve.com/cve/CVE-2006-1100.htmlTue, 16 Jun 2026 22:22:01 +0000HIGH 7.5: Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data.