CVE-2020-6017: Buffer Overflow
Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long unreliable segments in function SNPReceiveUnreliableSegment() when configured to support plain-text messages, leading to a Heap-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2020-6017?
CVE-2020-6017 is a vulnerability in Valve's Game Networking Sockets prior to version v1.2.0 that allows for a heap-based buffer overflow and potential remote code execution.
What is the severity of CVE-2020-6017?
CVE-2020-6017 has a severity rating of 9.8 (critical).
How does CVE-2020-6017 affect Valve's Game Networking Sockets?
CVE-2020-6017 affects Valve's Game Networking Sockets prior to version v1.2.0 and can lead to a heap-based buffer overflow and memory corruption.
How can I fix CVE-2020-6017?
To fix CVE-2020-6017, update Valve's Game Networking Sockets to version v1.2.0 or later.
Where can I find more information about CVE-2020-6017?
You can find more information about CVE-2020-6017 at the following references: [GitHub Commit](https://github.com/ValveSoftware/GameNetworkingSockets/commit/e0c86dcb9139771db3db0cfdb1fb8bef0af19c43) and [Checkpoint Research Blog](https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/).