PatchTheCVEkreed vulnerabilities and fixes
Recent CVEs affecting kreed, with upgrade or downgrade steps. 3 tracked.
kreed has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2005-01-10. Highest priority: CVE-2004-1214 (score 64/100).
- CVE-2004-1216 MEDIUM 5.0 DOWNGRADE The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service
- CVE-2004-1215 MEDIUM 5.0 DOWNGRADE Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP
- CVE-2004-1214 HIGH 10.0 DOWNGRADE Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via fo
FAQ
How do I fix kreed vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is kreed being exploited right now?
None of the tracked kreed CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which kreed CVE should I patch first?
CVE-2004-1214 currently ranks highest (64/100): Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via fo.