CVE catalog

CVE-2026-33250

Severity: High · CVSS 7.5
Published: Mar 21, 2026, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.85% · Oct 25, 2026

Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use this to crash the game on the player's machine. Authentication is not needed and, by default, logs do not contain any useful information. All users should upgrade to Freeciv21 version 3.1.1. Running the server behind a firewall can help mitigate the issue for non-public servers. For local games, Freeciv21 restricts connections to the current user and is therefore not affected.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	freeciv	sid	`3.2.6+ds-1`	fixed
Debian	freeciv	forky	`3.2.6+ds-1`	fixed
Debian	freeciv	trixie	`3.1.4+ds-2+deb13u1`	fixed
Debian	freeciv	trixie-security	`3.1.4+ds-2+deb13u1`	fixed
Debian	freeciv	bookworm	`3.0.6-1+deb12u1`	fixed
Debian	freeciv	bookworm-security	`3.0.6-1+deb12u1`	fixed
Ubuntu	freeciv	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-client-extras	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-client-gtk3	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-client-qt	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-client-sdl	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-data	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-ruleset-tools	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv-server	noble	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv	pro	`3.0.8-1`	vulnerable
Ubuntu	freeciv	pro	`3.0.8-2`	vulnerable
Ubuntu	freeciv	pro	`3.0.8-2build1`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1build3`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1build4`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1build5`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv	pro	`3.0.8-1`	vulnerable
Ubuntu	freeciv	pro	`3.0.8-2`	vulnerable
Ubuntu	freeciv	pro	`3.0.8-2build1`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1build3`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1build4`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1build5`	vulnerable
Ubuntu	freeciv	pro	`3.1.0+ds-1ubuntu0.1~esm1`	fixed
Ubuntu	freeciv	25.10	`3.1.4+ds-2`	vulnerable
Ubuntu	freeciv	25.10	`3.2.0+ds-1`	vulnerable
Opensuse	freeciv	leap 16.0	`3.2.4-bp160.1.1`	fixed
Opensuse	freeciv	tumbleweed	`3.2.4-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	freeciv	source	sid	`3.2.4+ds-1`	not yet assigned	Not reported	[1131524]
Debian	freeciv	source	forky	`3.2.4+ds-1`	not yet assigned	Not reported	[1131524]
Debian	freeciv	source	trixie	`3.1.4+ds-2+deb13u1`	not yet assigned	Not reported	[1131524]
Debian	freeciv	source	bookworm	`3.0.6-1+deb12u1`	not yet assigned	Not reported	[1131524]
Ubuntu	freeciv	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-client-extras	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-client-gtk3	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-client-qt	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-client-sdl	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-data	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-ruleset-tools	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv-server	deb	noble	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	Not reported	Not reported
Ubuntu	freeciv	deb	pro	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	USN-8754-1	Not reported
Ubuntu	freeciv	deb	pro	`3.1.0+ds-1ubuntu0.1~esm1`	Not reported	UBUNTU-CVE-2026-33250	Not reported
Opensuse	freeciv	rpm	leap 16.0	`3.2.4-bp160.1.1`	Not reported	OPENSUSE-SU-2026:20423-1	Not reported
Opensuse	freeciv	rpm	tumbleweed	`3.2.4-1.1`	Not reported	OPENSUSE-SU-2026:10401-1	Not reported

[Debian bug #1131524]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[freeciv-gtk3]Unknown
Source package: [freeciv]
Details (1)
- 3.2.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.2.4-1.1
  Version impact unknown
  nvd · freeciv · opensuse · tumbleweed
[freeciv-gtk4]Unknown
Source package: [freeciv]
Details (1)
- 3.2.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.2.4-1.1
  Version impact unknown
  nvd · freeciv · opensuse · tumbleweed
[freeciv-lang]Unknown
Source package: [freeciv]
Details (1)
- 3.2.5-2.1 · noarch · tumbleweed
  Unknown · Fixed: 3.2.4-1.1
  Version impact unknown
  nvd · freeciv · opensuse · tumbleweed
[freeciv-qt]Unknown
Source package: [freeciv]
Details (1)
- 3.2.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.2.4-1.1
  Version impact unknown
  nvd · freeciv · opensuse · tumbleweed
[freeciv-sdl2]Unknown
Source package: [freeciv]
Details (1)
- 3.2.5-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 3.2.4-1.1
  Version impact unknown
  nvd · freeciv · opensuse · tumbleweed

[Debian 12 (Bookworm)]

[freeciv]Fixed
Details (4)
- 3.0.6-1+deb12u1 · all · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · all · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-client-extras]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-client-gtk]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-client-gtk3]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-client-qt]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-client-sdl]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-data]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · all · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · all · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · all · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-ruleset-tools]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
[freeciv-server]Fixed
Source package: [freeciv]
Details (4)
- 3.0.6-1+deb12u1 · amd64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · amd64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12
- 3.0.6-1+deb12u1 · arm64 · bookworm-security
  Fixed · Fixed: 3.0.6-1+deb12u1
  nvd · freeciv · debian · bookworm; nvd · freeciv · debian · 12

[Debian 13 (Trixie)]

[freeciv]Fixed
Details (4)
- 3.1.4+ds-2+deb13u1 · all · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · all · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · all · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · all · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
[freeciv-client-extras]Fixed
Source package: [freeciv]
Details (4)
- 3.1.4+ds-2+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
[freeciv-client-gtk3]Fixed
Source package: [freeciv]
Details (4)
- 3.1.4+ds-2+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
[freeciv-client-gtk4]Fixed
Source package: [freeciv]
Details (4)
- 3.1.4+ds-2+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
[freeciv-client-qt]Fixed
Source package: [freeciv]
Details (4)
- 3.1.4+ds-2+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
[freeciv-client-sdl]Fixed
Source package: [freeciv]
Details (4)
- 3.1.4+ds-2+deb13u1 · amd64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · amd64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13
- 3.1.4+ds-2+deb13u1 · arm64 · trixie-security
  Fixed · Fixed: 3.1.4+ds-2+deb13u1
  nvd · freeciv · debian · 13

Next results

Observed: Oct 27, 2026, 8:03:50 AM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]