CVE-2009-4846 [Medium] | Memory Corruption in Deliantra

CVE-2009-4846 is rated Moderate Risk (60.8/100): CVSS Medium severity, with high exploitation likelihood (EPSS 6.89%, 90th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +1.90% over the last day, indicating growing attacker interest. High exploitation likelihood—assess exposure and prioritize remediation.

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2025-03-30	4.98%	6.89%	+1.90%
2	2025-03-29	6.89%	4.98%	-1.90%
3	2025-03-17	—	6.89%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2025-03-30

4.98%

6.89%

+1.90%

2025-03-29

6.89%

4.98%

-1.90%

2025-03-17

—

6.89%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
6.8	2.0	MEDIUM	`AV:N/AC:M/Au:N/C:P/I:P/A:P` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:M) Exploitation needs some favorable conditions, but not exceptional ones. Authentication (AU:N) No authentication is required. Confidentiality impact (C:P) Partial confidentiality impact. Integrity impact (I:P) Partial integrity impact. Availability impact (A:P) Partial availability impact.	8.6	6.4	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

6.8

2.0

MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:M): Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:P): Partial confidentiality impact.
Integrity impact (I:P): Partial integrity impact.
Availability impact (A:P): Partial availability impact.

8.6

6.4

[email protected]

Affected software / configurations for CVE-2009-4846

Vendor	Product	Version	Raw CPE
deliantra	deliantra	<= 2.81	cpe:2.3:a:deliantra:deliantra::::::::
deliantra	deliantra	0.99	cpe:2.3:a:deliantra:deliantra:0.99:::::::*
deliantra	deliantra	0.9955	cpe:2.3:a:deliantra:deliantra:0.9955:::::::*
deliantra	deliantra	0.9956	cpe:2.3:a:deliantra:deliantra:0.9956:::::::*
deliantra	deliantra	0.9959	cpe:2.3:a:deliantra:deliantra:0.9959:::::::*
deliantra	deliantra	0.9960	cpe:2.3:a:deliantra:deliantra:0.9960:::::::*
deliantra	deliantra	0.9963	cpe:2.3:a:deliantra:deliantra:0.9963:::::::*
deliantra	deliantra	0.9965	cpe:2.3:a:deliantra:deliantra:0.9965:::::::*
deliantra	deliantra	0.9967	cpe:2.3:a:deliantra:deliantra:0.9967:::::::*
deliantra	deliantra	0.9970	cpe:2.3:a:deliantra:deliantra:0.9970:::::::*
deliantra	deliantra	0.9972	cpe:2.3:a:deliantra:deliantra:0.9972:::::::*
deliantra	deliantra	0.9974	cpe:2.3:a:deliantra:deliantra:0.9974:::::::*
deliantra	deliantra	0.9975	cpe:2.3:a:deliantra:deliantra:0.9975:::::::*
deliantra	deliantra	0.9976	cpe:2.3:a:deliantra:deliantra:0.9976:::::::*
deliantra	deliantra	0.9977	cpe:2.3:a:deliantra:deliantra:0.9977:::::::*
deliantra	deliantra	0.9978	cpe:2.3:a:deliantra:deliantra:0.9978:::::::*
deliantra	deliantra	2.0	cpe:2.3:a:deliantra:deliantra:2.0:::::::*
deliantra	deliantra	2.1	cpe:2.3:a:deliantra:deliantra:2.1:::::::*
deliantra	deliantra	2.01	cpe:2.3:a:deliantra:deliantra:2.01:::::::*
deliantra	deliantra	2.02	cpe:2.3:a:deliantra:deliantra:2.02:::::::*
deliantra	deliantra	2.2	cpe:2.3:a:deliantra:deliantra:2.2:::::::*
deliantra	deliantra	2.3	cpe:2.3:a:deliantra:deliantra:2.3:::::::*
deliantra	deliantra	2.03	cpe:2.3:a:deliantra:deliantra:2.03:::::::*
deliantra	deliantra	2.4	cpe:2.3:a:deliantra:deliantra:2.4:::::::*
deliantra	deliantra	2.5	cpe:2.3:a:deliantra:deliantra:2.5:::::::*
deliantra	deliantra	2.6	cpe:2.3:a:deliantra:deliantra:2.6:::::::*
deliantra	deliantra	2.7	cpe:2.3:a:deliantra:deliantra:2.7:::::::*
deliantra	deliantra	2.31	cpe:2.3:a:deliantra:deliantra:2.31:::::::*
deliantra	deliantra	2.32	cpe:2.3:a:deliantra:deliantra:2.32:::::::*
deliantra	deliantra	2.41	cpe:2.3:a:deliantra:deliantra:2.41:::::::*
deliantra	deliantra	2.42	cpe:2.3:a:deliantra:deliantra:2.42:::::::*
deliantra	deliantra	2.43	cpe:2.3:a:deliantra:deliantra:2.43:::::::*
deliantra	deliantra	2.51	cpe:2.3:a:deliantra:deliantra:2.51:::::::*
deliantra	deliantra	2.52	cpe:2.3:a:deliantra:deliantra:2.52:::::::*
deliantra	deliantra	2.53	cpe:2.3:a:deliantra:deliantra:2.53:::::::*
deliantra	deliantra	2.54	cpe:2.3:a:deliantra:deliantra:2.54:::::::*
deliantra	deliantra	2.55	cpe:2.3:a:deliantra:deliantra:2.55:::::::*
deliantra	deliantra	2.56	cpe:2.3:a:deliantra:deliantra:2.56:::::::*
deliantra	deliantra	2.61	cpe:2.3:a:deliantra:deliantra:2.61:::::::*
deliantra	deliantra	2.71	cpe:2.3:a:deliantra:deliantra:2.71:::::::*
deliantra	deliantra	2.72	cpe:2.3:a:deliantra:deliantra:2.72:::::::*
deliantra	deliantra	2.73	cpe:2.3:a:deliantra:deliantra:2.73:::::::*
deliantra	deliantra	2.74	cpe:2.3:a:deliantra:deliantra:2.74:::::::*
deliantra	deliantra	2.75	cpe:2.3:a:deliantra:deliantra:2.75:::::::*
deliantra	deliantra	2.76	cpe:2.3:a:deliantra:deliantra:2.76:::::::*
deliantra	deliantra	2.77	cpe:2.3:a:deliantra:deliantra:2.77:::::::*
deliantra	deliantra	2.78	cpe:2.3:a:deliantra:deliantra:2.78:::::::*
deliantra	deliantra	2.79	cpe:2.3:a:deliantra:deliantra:2.79:::::::*
deliantra	deliantra	2.80	cpe:2.3:a:deliantra:deliantra:2.80:::::::*

References for CVE-2009-4846

URL	Tags
http://cvs.schmorp.de/deliantra/server/Changes?pathrev=rel-2_82
http://cvs.schmorp.de/deliantra/server/server/c_party.C?r1=1.29&r2=1.30	Patch
http://secunia.com/advisories/37317	Vendor Advisory
http://www.osvdb.org/59878
http://www.osvdb.org/59879
http://www.vupen.com/english/advisories/2009/3176	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/54205
https://exchange.xforce.ibmcloud.com/vulnerabilities/54206

URL

CVE-2009-4846

Exploit prediction scoring system (EPSS) score for CVE-2009-4846

Common vulnerability scoring system (CVSS) metrics for CVE-2009-4846

Weakness enumeration for CVE-2009-4846

Affected software / configurations for CVE-2009-4846

References for CVE-2009-4846