Skip to content
OpenAdvisories
High USN-8754-1 1 CVE

freeciv vulnerability

Published Sep 14, 2026 · Updated Sep 14, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Freeciv incorrectly handled certain network packets,
resulting in a stack overflow. A remote attacker could possibly use this
issue to cause Freeciv clients or servers to crash, resulting in a denial
of service.

Fixed packages 5

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS freeciv 2.5.3-1ubuntu0.1~esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS freeciv 2.5.10-1ubuntu0.1~esm1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS freeciv 2.6.2-1ubuntu0.1~esm1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS freeciv 2.6.6-1ubuntu0.1~esm1
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS freeciv 3.1.0+ds-1ubuntu0.1~esm1

Vulnerabilities 1

  • High 7.5
    CVE-2026-33250

    Crash when receiving specially-crafted packets

    Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use…

    longturn freeciv21 freeciv freeciv Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-33250