PatchTheCVE: quake ii serverhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2004-2597: Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access chttps://patchthecve.com/cve/CVE-2004-2597.htmlhttps://patchthecve.com/cve/CVE-2004-2597.htmlTue, 16 Jun 2026 22:09:57 +0000MEDIUM 5.0: Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip" key/value pair but is also long enough to cause a new key/value pair to be truncated, which interferes with the server's abilCVE-2004-2596: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of servichttps://patchthecve.com/cve/CVE-2004-2596.htmlhttps://patchthecve.com/cve/CVE-2004-2596.htmlTue, 16 Jun 2026 22:09:57 +0000MEDIUM 5.0: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections from the same IP address.CVE-2004-2593: Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allhttps://patchthecve.com/cve/CVE-2004-2593.htmlhttps://patchthecve.com/cve/CVE-2004-2593.htmlTue, 16 Jun 2026 22:09:56 +0000HIGH 7.5: Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a packet with a long cmd_args buffer.CVE-2004-2592: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of servichttps://patchthecve.com/cve/CVE-2004-2592.htmlhttps://patchthecve.com/cve/CVE-2004-2592.htmlTue, 16 Jun 2026 22:09:56 +0000MEDIUM 5.0: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to send data stored at a negative array offset, which is not handled when processing Configstrings and Baselines.