Valve Software Half-life Dedicated Server — known CVE vulnerabilities

Every CVE whose affected-product data names Valve Software Half-life Dedicated Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2000-0969 — CVSS 10.0 (critical): Format string vulnerability in Half Life dedicated server build 3104 and earlier allows remote attackers to execute arbitrary commands by…
• CVE-2000-0968 — CVSS 10.0 (critical): Buffer overflow in Half Life dedicated server before build 3104 allows remote attackers to execute arbitrary commands via a long rcon…
• CVE-2007-5713 — CVSS 7.5 (high): Off-by-one error in the GeoIP module in the AMX Mod X 1.76d plugin for Half-Life Server might allow attackers to execute arbitrary code or…
• CVE-2001-0359 — CVSS 7.5 (high): Format string vulnerability in Sierra Half-Life build 1573 and earlier allows a remote attacker to execute arbitrary code via the map…
• CVE-2002-0964 — CVSS 5.0 (medium): Half-Life Server 1.1.1.0 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via multiple responses to…
• CVE-2004-0724 — CVSS 5.0 (medium): The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty…
• CVE-2007-5477 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to…