Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client lockout) via a series of UDP join packets from a spoofed IP address, which triggers temporary blacklisting of this IP address.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Soldat_dedicated_server | Michal_marcinkowski | * | 2.6.2 (including) |
| Soldat_game_server | Michal_marcinkowski | * | 1.4.2 (including) |