CVE-2021-30481 - log back

CVE-2021-30481 edited at 14 Nov 2021 09:37:25
References
+ https://secret.club/2021/04/20/source-engine-rce-invite.html
https://news.ycombinator.com/item?id=26762170
https://twitter.com/floesen_/status/1337107178096881666
https://twitter.com/the_secret_club/status/1380868759129296900
https://www.youtube.com/watch?v=rNQn--9xR1Q
CVE-2021-30481 edited at 10 Apr 2021 23:25:43
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Arbitrary code execution
Description
+ Valve Steam through 2021-04-10, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click.
References
+ https://news.ycombinator.com/item?id=26762170
+ https://twitter.com/floesen_/status/1337107178096881666
+ https://twitter.com/the_secret_club/status/1380868759129296900
+ https://www.youtube.com/watch?v=rNQn--9xR1Q
Notes
CVE-2021-30481 created at 10 Apr 2021 23:23:10