CVE-2009-4847
UnknownEPSS 1.10%
Last modified
CVE-2009-4847 is a vulnerability of currently unknown severity. Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty treasure list.. EPSS estimates a 1.10% chance of exploitation in the next 30 days.
Description
Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty treasure list.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Deliantra | Deliantra | <= 2.81 |
| Deliantra | Deliantra | 0.99 |
| Deliantra | Deliantra | 0.9955 |
| Deliantra | Deliantra | 0.9956 |
| Deliantra | Deliantra | 0.9959 |
| Deliantra | Deliantra | 0.9960 |
| Deliantra | Deliantra | 0.9963 |
| Deliantra | Deliantra | 0.9965 |
| Deliantra | Deliantra | 0.9967 |
| Deliantra | Deliantra | 0.9970 |
| Deliantra | Deliantra | 0.9972 |
| Deliantra | Deliantra | 0.9974 |
| Deliantra | Deliantra | 0.9975 |
| Deliantra | Deliantra | 0.9976 |
| Deliantra | Deliantra | 0.9977 |
| Deliantra | Deliantra | 0.9978 |
| Deliantra | Deliantra | 2.0 |
| Deliantra | Deliantra | 2.1 |
| Deliantra | Deliantra | 2.01 |
| Deliantra | Deliantra | 2.02 |
| Deliantra | Deliantra | 2.2 |
| Deliantra | Deliantra | 2.3 |
| Deliantra | Deliantra | 2.03 |
| Deliantra | Deliantra | 2.4 |
| Deliantra | Deliantra | 2.5 |
| Deliantra | Deliantra | 2.6 |
| Deliantra | Deliantra | 2.7 |
| Deliantra | Deliantra | 2.31 |
| Deliantra | Deliantra | 2.32 |
| Deliantra | Deliantra | 2.41 |
| Deliantra | Deliantra | 2.42 |
| Deliantra | Deliantra | 2.43 |
| Deliantra | Deliantra | 2.51 |
| Deliantra | Deliantra | 2.52 |
| Deliantra | Deliantra | 2.53 |
| Deliantra | Deliantra | 2.54 |
| Deliantra | Deliantra | 2.55 |
| Deliantra | Deliantra | 2.56 |
| Deliantra | Deliantra | 2.61 |
| Deliantra | Deliantra | 2.71 |
| Deliantra | Deliantra | 2.72 |
| Deliantra | Deliantra | 2.73 |
| Deliantra | Deliantra | 2.74 |
| Deliantra | Deliantra | 2.75 |
| Deliantra | Deliantra | 2.76 |
| Deliantra | Deliantra | 2.77 |
| Deliantra | Deliantra | 2.78 |
| Deliantra | Deliantra | 2.79 |
| Deliantra | Deliantra | 2.80 |
References
- http://www.vupen.com/english/advisories/2009/3176Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3176Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-4847?
Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty treasure list.
How severe is CVE-2009-4847?
Severity scoring for CVE-2009-4847 is pending analysis. The EPSS model estimates a 1.10% probability of exploitation in the next 30 days.
How do I fix CVE-2009-4847?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-4841Heap-based buffer overflow in the SonicMediaPlayer ActiveX c…
- CVE-2009-4842Multiple cross-site scripting (XSS) vulnerabilities in ToutV…
- CVE-2009-4843ToutVirtual VirtualIQ Pro before 3.5 build 8691 does not req…
- CVE-2009-4844ToutVirtual VirtualIQ Pro 3.2 build 7882 does not restrict a…
- CVE-2009-4845The configuration page in ToutVirtual VirtualIQ Pro 3.2 buil…
- CVE-2009-4846Multiple buffer overflows in Deliantra Server before 2.82 al…
- CVE-2009-4848Multiple cross-site scripting (XSS) vulnerabilities in ToutV…
- CVE-2009-4849Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2009-4850The Awingsoft Awakening Winds3D Viewer plugin 3.5.0.9 allows…
- CVE-2009-4851The activation resend function in the Profiles module in XOO…
- CVE-2009-4852Multiple cross-site scripting (XSS) vulnerabilities in Seman…
- CVE-2009-4853Multiple cross-site scripting (XSS) vulnerabilities in JumpB…
Are you affected by CVE-2009-4847?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
