Terry Henning

**Name of the Vulnerable Software and Affected Versions** Half-Life engine versions prior to July 7, 2004 **Description** The issue allows remote attackers to cause a denial of service, resulting in either a server or client crash. This is achieved by sending an empty fragmented packet. **Recommendations** For versions prior to July 7, 2004, consider applying configuration changes to handle or reject empty fragmented packets to prevent denial of service attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.