Lucene search

K
osvGoogleOSV:CVE-2020-6018
HistoryDec 02, 2020 - 1:15 a.m.

CVE-2020-6018

2020-12-0201:15:12
Google
osv.dev
12
valve
game networking sockets
buffer overflow
memory corruption
remote code execution
cve-2020-6018
libsodium

AI Score

8

Confidence

High

EPSS

0.009

Percentile

82.9%

Valve’s Game Networking Sockets prior to version v1.2.0 improperly handles long encrypted messages in function AES_GCM_DecryptContext::Decrypt() when compiled using libsodium, leading to a Stack-Based Buffer Overflow and resulting in a memory corruption and possibly even a remote code execution.

AI Score

8

Confidence

High

EPSS

0.009

Percentile

82.9%

Related for OSV:CVE-2020-6018