Read the docs

Valvesoftware

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Valvesoftware records in CISA KEV

No Valvesoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Game Networking Sockets · all components

Priority MEDIUM 51

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of me…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06 Published 2020-11-18 Fixed in v1.2.0 CWE-590
TI-2020-04918 CVE-2020-6018 · GHSA-42qq-mh3v-978m

Buffer overflow in Game Networking Sockets

Priority MEDIUM 48

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03234 Published 2020-12-02 Fixed in v1.2.0 CWE-120
TI-2020-04917 CVE-2020-6017 · GHSA-p7jj-vwwf-c644

Buffer overflow in Game Networking Sockets

Priority MEDIUM 48

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegment() when configured to support plain-text messages, leading to a Heap-Based Buffe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03234 Published 2020-12-03 Fixed in v1.2.0 CWE-120
Priority LOW 38

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02791 Published 2020-11-13 Fixed in v1.2.0 CWE-248
Open these records in search →