Halflife: [GoldSrc] SV_ParseConsistencyResponse vulnerability

Created on 27 Sep 2020  路  3Comments  路  Source: ValveSoftware/halflife

Screenshot_2

Users can exploit this by sending a fake clc_fileconsistency with length <= 0, causing hlds to close.
Sys_Error should be replaced with Con_Printf/Con_DPrintf.

picture magister4813
👍4

Most helpful comment

The client should also be dropped from the server if this happens.

picture Solokiller on 27 Sep 2020
👍5

All 3 comments

The client should also be dropped from the server if this happens.

Solokiller picture Solokiller on 27 Sep 2020
👍5

Same for _SV_ParseMove_:

image

Splatt581 picture Splatt581 on 5 Nov 2020
👍1

@kisak-valve
This issue needs to be tracked at ToDO list

RauliTop picture RauliTop on 7 Dec 2020
Was this page helpful?
0 / 5 - 0 ratings

Related issues

perforatorRU picture perforatorRU  路  3Comments
perforatorRU picture perforatorRU  路  3Comments
LuckyStrikeOriginal picture LuckyStrikeOriginal  路  4Comments
WhiteFang1319 picture WhiteFang1319  路  3Comments
zp picture zp  路  4Comments