CVE-2020-6019

2020-11-1315:03:31

CWE-248

checkpoint

www.cve.org

valve

game networking sockets

vulnerability

inlined statistics messages

handling

EPSS

0.001

Percentile

45.7%

JSON

Valve’s Game Networking Sockets prior to version v1.2.0 improperly handles inlined statistics messages in function CConnectionTransportUDPBase::Received_Data(), leading to an exception thrown from libprotobuf and resulting in a crash.

CNA Affected

[
  {
    "product": "Game Networking Sockets",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to v1.2.0"
      }
    ]
  }
]