Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

TI-2020-04917 CVE-2020-6017 · GHSA-p7jj-vwwf-c644

Buffer overflow in Game Networking Sockets

Priority MEDIUM 48

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNP_ReceiveUnreliableSegment() when configured to support plain-text messages, leading to a Heap-Based Buffe…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03234 Published 2020-12-03 Fixed in v1.2.0 CWE-120
TI-2020-04918 CVE-2020-6018 · GHSA-42qq-mh3v-978m

Buffer overflow in Game Networking Sockets

Priority MEDIUM 48

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03234 Published 2020-12-02 Fixed in v1.2.0 CWE-120
Priority MEDIUM 51

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles unreliable segments with negative offsets in function SNP_ReceiveUnreliableSegment(), leading to a Heap-Based Buffer Underflow and a free() of me…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06 Published 2020-11-18 Fixed in v1.2.0 CWE-590
Priority LOW 38

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulti…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02791 Published 2020-11-13 Fixed in v1.2.0 CWE-248