CVE-2015-4016: Input Validation
Published May 20, 2015
·Updated
The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.
Affected Software
1 affected component
Valvesoftware Steam Client<2015-05-13
Remediation
Patch Available
Event History
May 20, 2015
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-4016?
CVE-2015-4016 is classified as a denial of service vulnerability.
2
How do I fix CVE-2015-4016?
To mitigate CVE-2015-4016, ensure you are using a version of Valve Steam Client updated after May 13, 2015.
3
What does CVE-2015-4016 affect?
CVE-2015-4016 affects the Valve Software Steam Client prior to version 2015-05-13.
4
What can attackers do with CVE-2015-4016?
Attackers can exploit CVE-2015-4016 to cause the Steam Client to crash, resulting in a denial of service.
5
Is CVE-2015-4016 a local or remote vulnerability?
CVE-2015-4016 is a remote vulnerability that can be exploited without physical access to the target.