Counter-strike vulnerabilities

2 known vulnerabilities in Counter-strike from Valvesoftware. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Counter-strike: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-38312Oct 15, 2023Valvesoftware

  A directory traversal vulnerability in Valve Counter-Strike 8684 allows a client (with remote control access to a game server) to read arbitrary files from the underlying server via the motdfile console variable.

• 9.8 Critical severity

  Counter-strike: Buffer Copy without Checking Size of Input

  CVE-2023-35855Jun 19, 2023ValvesoftwareEPSS 1.07%

  A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile console variable.