PT-2017-13664 · Blizzard · Overwatch

Chromega1231 · Publicado 2017-09-26 · Atualizado 2017-10-06 · CVE-2017-14748

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Blizzard Overwatch version 1.15.0.2

Description A race condition issue allows remote authenticated users to cause a denial of service, resulting in season bans and SR losses for other users, by leaving a competitive match at a specific time during the initial loading of that match.

Recommendations For version 1.15.0.2, consider avoiding leaving competitive matches during the initial loading phase until a fix is available. As a temporary workaround, users may want to wait until the match has fully loaded before taking any actions that could potentially trigger this issue. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2017-14748

Produtos afetados

Overwatch

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-14748 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14748 · Nota de Segurança
• https://us.battle.net/forums/en/overwatch/topic/20759216554 · Nota
• http://securityfocus.com/bid/101087 · Nota
• https://reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly · Nota