4 ms·

FWIW, > CVE-2023-24059 What other video games have had CVE's?

tschwimmer 4y ago
Fairly recently Dark Souls 3 had a pretty bad one: https://nvd.nist.gov/vuln/detail/CVE-2021-34170 https://nvd.nist.gov/vuln/detail/CVE-2021-34170 They took the online servers offline in January and to their credit they patched a 6 year old game and brought the servers back in September.
rubychill 4y ago
Factorio had a CVE that allowed RCE in multiplayer servers: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1161...
beardog 4y ago
Not game specific, but I'll put this here: https://portswigger.net/daily-swig/valve-belatedly-fixes-steam-gaming-platform-rce-vulnerability https://portswigger.net/daily-swig/valve-belatedly-fixes-ste...
BxGyw2 4y ago
Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to RATs etc which doesn't help
- poly_morphis 4y ago
  How do you game in a VM? A lot of my game time includes flight simulators with many external peripherals.
  - BxGyw2 4y ago
    Not gonna lie and pretend I know how it works but qemu is capable of passing USB devices into VMs while they are connected and visible to the host kernel, and this works perfectly for me for joysticks, steering wheels and other shit For mouse and keyboard I just use the evdev forwarding thing where you press both ctrl keys to swap between host and guest
  - gruez 4y ago
    external peripherals is probably the easy part, given that usb passthrough almost always "just works" in my experience. The bigger problem is getting GPU passthrough working.
  - 5e92cb50239222b 4y ago
    This is the biggest obstacle you're going to face: https://wiki.archlinux.org/title/PCI_passthrough_via_OVMF https://wiki.archlinux.org/title/PCI_passthrough_via_OVMF With AMD cards it's relatively easy if you're willing to install two cards and have one of them just sit there doing nothing when you're not using the VM. It's also possible to use just one card and detach it from the host system, pass it to the VM, and then reattach back to the host system when you're done playing, although I spent multiple days on this and never got it working. YMMV, it was 2-3 years ago, the driver support may have improved. With nvidia it ranges from difficult to impossible.
  - smileybarry 4y ago
    The only good working solution I found (other than PCIe passthrough or specialized GPU virtualization) is VMware stuff (with better success on Windows [as a host]), because their DirectX virtualization is top-notch. Years ago I did some random testing of my Steam library and got close to native performance. Obviously, it means you can't use DLSS, RT, or any other GPU-specific features, but their DirectX virtualization supports up to DX12.
- simooooo 4y ago
  How do you play any game with anti-cheat in a VM?
  - jamesfinlayson 4y ago
    Which anti-cheat would be triggered by running in a VM? I thought VAC worked by detecting runtime patching of .dll files.
    - BxGyw2 4y ago
      VAC has a number of other triggers too but doesn't care about VMs in particular. I think everyone and their dog is an expert in not tripping VAC at this point It's mostly those annoying ACs with kernel modules like EAC, BattlEye, ESEA etc. that do anti VM in an attempt to prevent cheat devs from 1. debugging the AC without at least a little effort and 2. having a clean OS but reading guest RAM from the host to avoid the anticheat entirely
  - BxGyw2 4y ago
    Depends on the game. The answer for me is I'm not really interested in flavour of the month online shooter games so it's never been an issue but I know plenty of people who are and just continue to modify their VM until it's not detected - it's always gonna be something you can do to hide from the AC
- ehnto 4y ago
  Naive and trusting is probably a fairer characterization. They aren't nor should they need to be security experts, the company who distributed the code should be more responsible, and more controversialy I think they should also be more culpable. We are past the startup friendly wild west stage of software technology, we know better and should expect better.
ninfy 4y ago
Call of Duty before 2015, CVE-2018-20817 and CVE-2018-10718, another RCE too. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2081... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10718 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071...
wingmanjd 4y ago
If I recall correctly, the log4j exploit was first (publicly) discovered affecting Minecraft.
trog 4y ago
Just had a quick look at Luigi Auriemma's website[1] to see if he had any CVEs listed - he found a ton of interesting bugs in video games - I used to follow his work closely when I was running game servers as they often could end up impacting us & figured if anyone had some it'd be him, but surprisingly don't see any listed! 1. https://aluigi.altervista.org/index.htm https://aluigi.altervista.org/index.htm
OatmealDome 4y ago
CVE-2022-47949 A bunch of first-party Nintendo Switch, Wii U, and 3DS games had a buffer overflow bug in a shared netcode library ("enl") which can be exploited by a remote attacker just by connecting to them in online play. Affected titles included Mario Kart 7, Mario Kart 8, Mario Kart 8 Deluxe, Splatoon, Splatoon 2, Splatoon 3, ARMS, Super Mario Maker 2, and Nintendo Switch Sports. (The Wii U games remain unpatched.)
pabs3 4y ago
I heard EVE Online had server-side RCE exploits many years ago, not sure if it got a CVE though. I expect all games have some sort of security bug, even the completely offline ones get speedruns that exploit memory bugs to win faster.
- rektide 4y ago
  My favorite EVE Online issue isn't a RCE/CVE, but rather just a general fuckup, where they, in an update, accidentally deleted the Windows boot.ini file off people's computers, rendering them unable to boot. https://www.eveonline.com/news/view/about-the-boot.ini-issue https://www.eveonline.com/news/view/about-the-boot.ini-issue

Fairly recently Dark Souls 3 had a pretty bad one: https://nvd.nist.gov/vuln/detail/CVE-2021-34170 https://nvd.nist.gov/vuln/detail/CVE-2021-34170 They took the online servers offline in January and to their credit they patched a 6 year old game and brought the servers back in September.

rubychill 4y ago

Factorio had a CVE that allowed RCE in multiplayer servers: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11615 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1161...

beardog 4y ago

Not game specific, but I'll put this here: https://portswigger.net/daily-swig/valve-belatedly-fixes-steam-gaming-platform-rce-vulnerability https://portswigger.net/daily-swig/valve-belatedly-fixes-ste...

BxGyw2 4y ago

Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to RATs etc which doesn't help

poly_morphis 4y ago
How do you game in a VM? A lot of my game time includes flight simulators with many external peripherals.
- BxGyw2 4y ago
  Not gonna lie and pretend I know how it works but qemu is capable of passing USB devices into VMs while they are connected and visible to the host kernel, and this works perfectly for me for joysticks, steering wheels and other shit For mouse and keyboard I just use the evdev forwarding thing where you press both ctrl keys to swap between host and guest
- gruez 4y ago
  external peripherals is probably the easy part, given that usb passthrough almost always "just works" in my experience. The bigger problem is getting GPU passthrough working.
- 5e92cb50239222b 4y ago
  This is the biggest obstacle you're going to face: https://wiki.archlinux.org/title/PCI_passthrough_via_OVMF https://wiki.archlinux.org/title/PCI_passthrough_via_OVMF With AMD cards it's relatively easy if you're willing to install two cards and have one of them just sit there doing nothing when you're not using the VM. It's also possible to use just one card and detach it from the host system, pass it to the VM, and then reattach back to the host system when you're done playing, although I spent multiple days on this and never got it working. YMMV, it was 2-3 years ago, the driver support may have improved. With nvidia it ranges from difficult to impossible.
- smileybarry 4y ago
  The only good working solution I found (other than PCIe passthrough or specialized GPU virtualization) is VMware stuff (with better success on Windows [as a host]), because their DirectX virtualization is top-notch. Years ago I did some random testing of my Steam library and got close to native performance. Obviously, it means you can't use DLSS, RT, or any other GPU-specific features, but their DirectX virtualization supports up to DX12.
simooooo 4y ago
How do you play any game with anti-cheat in a VM?
- jamesfinlayson 4y ago
  Which anti-cheat would be triggered by running in a VM? I thought VAC worked by detecting runtime patching of .dll files.
  - BxGyw2 4y ago
    VAC has a number of other triggers too but doesn't care about VMs in particular. I think everyone and their dog is an expert in not tripping VAC at this point It's mostly those annoying ACs with kernel modules like EAC, BattlEye, ESEA etc. that do anti VM in an attempt to prevent cheat devs from 1. debugging the AC without at least a little effort and 2. having a clean OS but reading guest RAM from the host to avoid the anticheat entirely
- BxGyw2 4y ago
  Depends on the game. The answer for me is I'm not really interested in flavour of the month online shooter games so it's never been an issue but I know plenty of people who are and just continue to modify their VM until it's not detected - it's always gonna be something you can do to hide from the AC
ehnto 4y ago
Naive and trusting is probably a fairer characterization. They aren't nor should they need to be security experts, the company who distributed the code should be more responsible, and more controversialy I think they should also be more culpable. We are past the startup friendly wild west stage of software technology, we know better and should expect better.

ninfy 4y ago

Call of Duty before 2015, CVE-2018-20817 and CVE-2018-10718, another RCE too. https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20817 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-2081... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-10718 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1071...

wingmanjd 4y ago

If I recall correctly, the log4j exploit was first (publicly) discovered affecting Minecraft.

trog 4y ago

Just had a quick look at Luigi Auriemma's website[1] to see if he had any CVEs listed - he found a ton of interesting bugs in video games - I used to follow his work closely when I was running game servers as they often could end up impacting us & figured if anyone had some it'd be him, but surprisingly don't see any listed! 1. https://aluigi.altervista.org/index.htm https://aluigi.altervista.org/index.htm

OatmealDome 4y ago

CVE-2022-47949 A bunch of first-party Nintendo Switch, Wii U, and 3DS games had a buffer overflow bug in a shared netcode library ("enl") which can be exploited by a remote attacker just by connecting to them in online play. Affected titles included Mario Kart 7, Mario Kart 8, Mario Kart 8 Deluxe, Splatoon, Splatoon 2, Splatoon 3, ARMS, Super Mario Maker 2, and Nintendo Switch Sports. (The Wii U games remain unpatched.)

pabs3 4y ago

I heard EVE Online had server-side RCE exploits many years ago, not sure if it got a CVE though. I expect all games have some sort of security bug, even the completely offline ones get speedruns that exploit memory bugs to win faster.

rektide 4y ago
My favorite EVE Online issue isn't a RCE/CVE, but rather just a general fuckup, where they, in an update, accidentally deleted the Windows boot.ini file off people's computers, rendering them unable to boot. https://www.eveonline.com/news/view/about-the-boot.ini-issue https://www.eveonline.com/news/view/about-the-boot.ini-issue