CVE-2011-10020

CVE-2011-10020 describes a denial-of-service vulnerability in Kaillera Server version 0.86. An unauthenticated remote attacker can crash the server by sending a malformed UDP packet after a successful initial handshake, rendering the service unresponsive. This flaw is due to improper input validation in the server's UDP packet handler. The vulnerability is rated as HIGH severity with a CVSS score of 8.7, indicating an easily exploitable network-based attack with no authentication required, leading to complete service unavailability. Its high FAUCET Risk Score of 99/100 further emphasizes its critical nature. Exploit code is publicly available, including a Metasploit module, though it is not listed on ExploitDB or as a KEV. Despite its age, the vulnerability has garnered significant community discussion, with 20 mentions, suggesting continued awareness and potential for exploitation.