PT-2020-18891 · Valve · Game Networking Sockets

Eyal Itkin · Published 2020-11-18 · Updated 2022-10-21 · CVE-2020-6016

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Valve's Game Networking Sockets versions prior to v1.2.0

Description The issue arises from the improper handling of unreliable segments with negative offsets in the SNP ReceiveUnreliableSegment() function, leading to a Heap-Based Buffer Underflow. This results in the free() of memory not allocated from the heap, causing memory corruption and potentially allowing for remote code execution.

Recommendations For versions prior to v1.2.0, update to version v1.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the SNP ReceiveUnreliableSegment() function until a patch is available.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

CWE-590

Related Identifiers

CVE-2020-6016

Affected Products

Game Networking Sockets

References · 6

• 🔥 https://research.checkpoint.com/2020/game-on-finding-vulnerabilities-in-valves-steam-sockets · Exploit
• https://github.com/ValveSoftware/GameNetworkingSockets/commit/e0c86dcb9139771db3db0cfdb1fb8bef0af19c43 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-6016 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6016 · Vendor Advisory
• https://t.me/true_secator/1242 · Telegram Post
• https://t.me/cybersecuritytechnologies/2270 · Telegram Post