A critical stack-based buffer overflow vulnerability in Freeciv21 allows unauthenticated remote attackers to trigger denial-of-service conditions on both server and client instances.

This vulnerability is caused by improper input validation leading to a stack-based buffer overflow when the application processes malicious network packets. Attackers do not require authentication to trigger this crash, making it remotely exploitable over the network.

The exploitation of this vulnerability results in a denial-of-service, which can lead to significant service disruption for public game servers and unexpected instability for end-user clients. With a CVSS score of 7.5, the high impact on availability presents a notable risk to operational continuity, especially for organizations hosting public-facing instances of the software.

Immediate Action: Upgrade all instances of Freeciv21 to version 3.1.1 or later immediately to incorporate the necessary stack overflow protections.

Proactive Monitoring: Monitor server logs for unexpected process crashes or repeated connection errors that may indicate attempts to trigger the overflow condition.

Compensating Controls: Deploy the server behind a strict network firewall to restrict access to authorized users, which may limit the exposure of the vulnerable interface to untrusted remote attackers.

Public Exploit Available: No — there is no confirmed public exploit available.

The severity of this vulnerability, combined with its ease of exploitation over the network, necessitates immediate action. Administrators should prioritize patching to version 3.1.1 to eliminate the stack-based buffer overflow condition. Failure to update leaves public-facing infrastructure vulnerable to simple, unauthenticated service disruption.