Read the docs
TI-2009-04603 Aliases CVE-2009-4847GHSA-2wvq-xm2v-3mr6

Deliantra Server before 2.82 allows remote authenticated users to cause a denial of…

Priority LOW 21CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

Deliantra Server before 2.82 allows remote authenticated users to cause a denial of service (daemon crash) via vectors involving an empty treasure list.

Why it matters now

EPSS 0.01104 65th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 49

CPEVersionsRoleVendor
cpe:2.3:a:deliantra:deliantra:*:*:*:*:*:*:*:*up to 2.81VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.99:*:*:*:*:*:*:*0.99VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9955:*:*:*:*:*:*:*0.9955VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9956:*:*:*:*:*:*:*0.9956VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9959:*:*:*:*:*:*:*0.9959VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9960:*:*:*:*:*:*:*0.9960VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9963:*:*:*:*:*:*:*0.9963VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9965:*:*:*:*:*:*:*0.9965VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9967:*:*:*:*:*:*:*0.9967VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9970:*:*:*:*:*:*:*0.9970VulnerableDeliantra
  • cpe:2.3:a:deliantra:deliantra:*:*:*:*:*:*:*:* Versions up to 2.81 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.99:*:*:*:*:*:*:* Versions 0.99 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9955:*:*:*:*:*:*:* Versions 0.9955 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9956:*:*:*:*:*:*:* Versions 0.9956 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9959:*:*:*:*:*:*:* Versions 0.9959 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9960:*:*:*:*:*:*:* Versions 0.9960 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9963:*:*:*:*:*:*:* Versions 0.9963 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9965:*:*:*:*:*:*:* Versions 0.9965 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9967:*:*:*:*:*:*:* Versions 0.9967 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9970:*:*:*:*:*:*:* Versions 0.9970 Vulnerable ·Deliantra
Show 39 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:deliantra:deliantra:0.9972:*:*:*:*:*:*:*0.9972VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9974:*:*:*:*:*:*:*0.9974VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9975:*:*:*:*:*:*:*0.9975VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9976:*:*:*:*:*:*:*0.9976VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9977:*:*:*:*:*:*:*0.9977VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:0.9978:*:*:*:*:*:*:*0.9978VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.0:*:*:*:*:*:*:*2.0VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.1:*:*:*:*:*:*:*2.1VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.01:*:*:*:*:*:*:*2.01VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.02:*:*:*:*:*:*:*2.02VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.2:*:*:*:*:*:*:*2.2VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.3:*:*:*:*:*:*:*2.3VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.03:*:*:*:*:*:*:*2.03VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.4:*:*:*:*:*:*:*2.4VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.5:*:*:*:*:*:*:*2.5VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.6:*:*:*:*:*:*:*2.6VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.7:*:*:*:*:*:*:*2.7VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.31:*:*:*:*:*:*:*2.31VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.32:*:*:*:*:*:*:*2.32VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.41:*:*:*:*:*:*:*2.41VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.42:*:*:*:*:*:*:*2.42VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.43:*:*:*:*:*:*:*2.43VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.51:*:*:*:*:*:*:*2.51VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.52:*:*:*:*:*:*:*2.52VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.53:*:*:*:*:*:*:*2.53VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.54:*:*:*:*:*:*:*2.54VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.55:*:*:*:*:*:*:*2.55VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.56:*:*:*:*:*:*:*2.56VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.61:*:*:*:*:*:*:*2.61VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.71:*:*:*:*:*:*:*2.71VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.72:*:*:*:*:*:*:*2.72VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.73:*:*:*:*:*:*:*2.73VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.74:*:*:*:*:*:*:*2.74VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.75:*:*:*:*:*:*:*2.75VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.76:*:*:*:*:*:*:*2.76VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.77:*:*:*:*:*:*:*2.77VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.78:*:*:*:*:*:*:*2.78VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.79:*:*:*:*:*:*:*2.79VulnerableDeliantra
cpe:2.3:a:deliantra:deliantra:2.80:*:*:*:*:*:*:*2.80VulnerableDeliantra
  • cpe:2.3:a:deliantra:deliantra:0.9972:*:*:*:*:*:*:* Versions 0.9972 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9974:*:*:*:*:*:*:* Versions 0.9974 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9975:*:*:*:*:*:*:* Versions 0.9975 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9976:*:*:*:*:*:*:* Versions 0.9976 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9977:*:*:*:*:*:*:* Versions 0.9977 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:0.9978:*:*:*:*:*:*:* Versions 0.9978 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.01:*:*:*:*:*:*:* Versions 2.01 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.02:*:*:*:*:*:*:* Versions 2.02 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.3:*:*:*:*:*:*:* Versions 2.3 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.03:*:*:*:*:*:*:* Versions 2.03 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.6:*:*:*:*:*:*:* Versions 2.6 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.7:*:*:*:*:*:*:* Versions 2.7 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.31:*:*:*:*:*:*:* Versions 2.31 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.32:*:*:*:*:*:*:* Versions 2.32 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.41:*:*:*:*:*:*:* Versions 2.41 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.42:*:*:*:*:*:*:* Versions 2.42 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.43:*:*:*:*:*:*:* Versions 2.43 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.51:*:*:*:*:*:*:* Versions 2.51 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.52:*:*:*:*:*:*:* Versions 2.52 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.53:*:*:*:*:*:*:* Versions 2.53 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.54:*:*:*:*:*:*:* Versions 2.54 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.55:*:*:*:*:*:*:* Versions 2.55 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.56:*:*:*:*:*:*:* Versions 2.56 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.61:*:*:*:*:*:*:* Versions 2.61 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.71:*:*:*:*:*:*:* Versions 2.71 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.72:*:*:*:*:*:*:* Versions 2.72 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.73:*:*:*:*:*:*:* Versions 2.73 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.74:*:*:*:*:*:*:* Versions 2.74 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.75:*:*:*:*:*:*:* Versions 2.75 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.76:*:*:*:*:*:*:* Versions 2.76 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.77:*:*:*:*:*:*:* Versions 2.77 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.78:*:*:*:*:*:*:* Versions 2.78 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.79:*:*:*:*:*:*:* Versions 2.79 Vulnerable ·Deliantra
  • cpe:2.3:a:deliantra:deliantra:2.80:*:*:*:*:*:*:* Versions 2.80 Vulnerable ·Deliantra

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2009-4847
  2. 2026-10-03 Alias added: GHSA-2wvq-xm2v-3mr6

References

Patch 1

Other 1

  • TI-2008-06888 Double free vulnerability in Deliantra server engine before 2.4 has unknown impact and attack vectors. CVSS 2.0HIGH 10.0
  • TI-2009-04602 Multiple buffer overflows in Deliantra Server before 2.82 allow remote attackers to… CVSS 2.0MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences