Vulnerability in Valve Software Half-Life
CVE-2002-0964
Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to the initial challenge with different cd_key values, which reaches the player limit and prevents other players from connecting until the original responses have timed out.
EPSS: 0.032 (86.6th percentile) — read the EPSS interpretation.
Affected products
- Valve_software Half-life — versions 1.1.0.4, 1.1.0.8, 1.1.0.9
- Valve_software Half-life_dedicated_server — versions 3.1.3
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)