PT-2025-42216 · Valve · Source Sdk

CVE-2017-20205 · Publicado 2025-10-15 · Atualizado 2025-10-15

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Crítica

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Valve's Source SDK (source-sdk-2013) (affected versions not specified)

Description The ragdoll model parsing logic in Valve's Source SDK (source-sdk-2013) contains a stack-based buffer overflow. The nexttoken function copies characters from an input string into a fixed-size stack buffer without bounds checking. When the ParseKeyValue function processes a collisionpair rule exceeding the destination buffer size of 256 bytes, an overflow of the szToken stack buffer can occur, potentially overwriting the function return address. An attacker can trigger this by providing a specially crafted ragdoll model, leading to remote code execution on affected clients or servers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Stack Overflow

Enumeração de Fraquezas

CWE-121

Identificadores relacionados

CVE-2017-20205

Produtos afetados

Source Sdk

Referências · 5

• https://github.com/ValveSoftware/source-sdk-2013 · Nota
• https://oneupsecurity.com/research/remote-code-execution-in-source-games · Nota
• https://t.me/CVEtracker/34927 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-20205 · Nota de Segurança
• https://vulncheck.com/advisories/valve-source-sdk-stack-based-buffer-overflow-rce · Nota