CVE-2013-6411: The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attacke...

Security readout for executives and security teams

CVE-2013-6411 is a remote denial-of-service flaw in OpenTTD. An attacker could crash a vulnerable game/server process by triggering an aircraft crash outside the map. The sources identify affected OpenTTD versions 0.3.6 through 1.3.2, but do not provide CVSS scoring. Exposure is mainly OpenTTD multiplayer or server deployments running versions 0.3.6 through 1.3.2. Typical business exposure is limited unless OpenTTD is installed, internet reachable, or packaged through a managed Linux distribution. Treat this as a targeted availability risk. Prioritize remediation for public OpenTTD servers or shared gaming environments; otherwise handle through normal legacy software hygiene and asset cleanup. Mitigation focus: Inventory OpenTTD installations and identify versions 0.3.6 through 1.3.2.; Upgrade or patch using OpenTTD, distribution, or vendor security guidance.; Restrict network exposure for vulnerable multiplayer servers until remediated..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.