Kaillera Server version 0.86 is vulnerable to a denial-of-service condition triggered by sending a malformed UDP packet after the initial handshake. Once a client sends a valid HELLO0.83 packet and receives a response, any subsequent malformed packet causes the server to crash and become unresponsive. This flaw stems from improper input validation in the server’s UDP packet handler, allowing unauthenticated remote attackers to disrupt service availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2011-10020 |
Exploitation
To exploit this vulnerability, an attacker must first establish a connection with the Kaillera Server by sending a valid HELLO0.83 packet. After receiving a response, the attacker can then send a malformed UDP packet, which will trigger the denial-of-service condition, causing the server to crash and become unresponsive.
Affected Products
- Kaillera Server version 0.86: This version is specifically vulnerable to denial-of-service attacks due to improper input validation in its UDP packet handling.
Mitigation
To mitigate this vulnerability, it is recommended to update the Kaillera Server to a version that addresses this flaw. Additionally, implementing network-level protections such as firewalls to filter out malformed packets can help prevent exploitation.