PT-2023-25346 · Valve · Counter-Strike

CVE-2023-35855

·

Publicado

2023-06-19

·

Atualizado

2023-06-30

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Counter-Strike versions through 8684
Description A buffer overflow issue allows a game server to execute arbitrary code on a remote client's machine. This is achieved by modifying the lservercfgfile console variable.
Recommendations For versions through 8684, as a temporary workaround, consider restricting the modification of the lservercfgfile console variable to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2023-35855

Produtos afetados

Counter-Strike