What is CVE-2020-6018?

CVE-2020-6018 is a vulnerability in Valve's Game Networking Sockets that can result in a stack-based buffer overflow and possibly remote code execution.

How does CVE-2020-6018 affect Valve's Game Networking Sockets?

CVE-2020-6018 affects Valve's Game Networking Sockets prior to version 1.2.0 and can lead to memory corruption and a possible remote code execution.

What is the severity of CVE-2020-6018?

CVE-2020-6018 has a severity rating of critical with a CVSS score of 9.8.

How can CVE-2020-6018 be fixed?

CVE-2020-6018 can be fixed by updating Valve's Game Networking Sockets to version 1.2.0 or later.

Vulnerability/
CVE-2020-6018

critical

9.8

CWE

787 120 119

2/12/2020

4/8/2024

CVE-2020-6018: Buffer Overflow

Q: Where can I find more information about CVE-2020-6018?

You can find more information about CVE-2020-6018 at the following references: [Link 1](https://github.com/ValveSoftware/GameNetworkingSockets/commit/bea84e2844b647532a9b7fbc3a6a8989d66e49e3), [Link 2](https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/).

First published: Wed Dec 02 2020(Updated: )

Valve's Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution.

Credit: cve@checkpoint.com

Affected Software	Affected Version	How to fix
Valvesoftware Game Networking Sockets	<1.2.0

Remedy

https://github.com/ValveSoftware/GameNetworkingSockets/commit/bea84e2844b647532a9b7fbc3a6a8989d66e49e3

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2020-6018?
CVE-2020-6018 is a vulnerability in Valve's Game Networking Sockets that can result in a stack-based buffer overflow and possibly remote code execution.
How does CVE-2020-6018 affect Valve's Game Networking Sockets?
CVE-2020-6018 affects Valve's Game Networking Sockets prior to version 1.2.0 and can lead to memory corruption and a possible remote code execution.
What is the severity of CVE-2020-6018?
CVE-2020-6018 has a severity rating of critical with a CVSS score of 9.8.
How can CVE-2020-6018 be fixed?
CVE-2020-6018 can be fixed by updating Valve's Game Networking Sockets to version 1.2.0 or later.
Where can I find more information about CVE-2020-6018?
You can find more information about CVE-2020-6018 at the following references: [Link 1](https://github.com/ValveSoftware/GameNetworkingSockets/commit/bea84e2844b647532a9b7fbc3a6a8989d66e49e3), [Link 2](https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets/).

collector/nvd-index
agent/references
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/remedy
agent/weakness
agent/author
agent/severity
agent/tags
agent/description
agent/first-publish-date
agent/event
agent/source
vendor/valvesoftware
canonical/valvesoftware game networking sockets

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.