CVE-2023-35855: Buffer Overflow
Published Jun 19, 2023
·Updated
A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.
Affected Software
1 affected component
Valvesoftware Counter-strike<=8684
Event History
Jun 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-35855?
The severity of CVE-2023-35855 is critical.
2
How does CVE-2023-35855 exploit a buffer overflow?
CVE-2023-35855 exploits a buffer overflow in Counter-Strike by modifying the lservercfgfile console variable.
3
Can CVE-2023-35855 allow a game server to execute arbitrary code on a remote client's machine?
Yes, CVE-2023-35855 allows a game server to execute arbitrary code on a remote client's machine.
4
Which version of Counter-Strike is affected by CVE-2023-35855?
CVE-2023-35855 affects all versions up to and including 8684 of Counter-Strike.
5
Is there a fix available for CVE-2023-35855?
It is recommended to update to a version of Counter-Strike that is not affected by CVE-2023-35855.