PT-2017-13664 · Blizzard · Overwatch

Chromega1231 · Published 2017-09-26 · Updated 2017-10-06 · CVE-2017-14748

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Blizzard Overwatch version 1.15.0.2

Description A race condition issue allows remote authenticated users to cause a denial of service, resulting in season bans and SR losses for other users, by leaving a competitive match at a specific time during the initial loading of that match.

Recommendations For version 1.15.0.2, consider avoiding leaving competitive matches during the initial loading phase until a fix is available. As a temporary workaround, users may want to wait until the match has fully loaded before taking any actions that could potentially trigger this issue. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2017-14748

Affected Products

Overwatch

References · 5

• https://osv.dev/vulnerability/CVE-2017-14748 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14748 · Security Note
• https://us.battle.net/forums/en/overwatch/topic/20759216554 · Note
• http://securityfocus.com/bid/101087 · Note
• https://reddit.com/r/Overwatch/comments/72euqx/theres_a_bug_out_there_that_can_instantly · Note