https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-1216.htmlhttps://patchthecve.com/cve/CVE-2004-1216.htmlTue, 16 Jun 2026 22:07:16 +0000MEDIUM 5.0: The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server freeze) via a long (1) nickname or (2) model type, which generates dialog boxes on the server that must be manually handled before the server continues the game.https://patchthecve.com/cve/CVE-2004-1215.htmlhttps://patchthecve.com/cve/CVE-2004-1215.htmlTue, 16 Jun 2026 22:07:16 +0000MEDIUM 5.0: Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, which causes a "message too long" socket error.https://patchthecve.com/cve/CVE-2004-1214.htmlhttps://patchthecve.com/cve/CVE-2004-1214.htmlTue, 16 Jun 2026 22:07:16 +0000HIGH 10.0: Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.