N/A

CVSS Score

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

GHSA-g588-cjg3-6g78

GHSA-g588-cjg3-6g78: Steamworks game clients/servers using P2P authentication vulnerable to denial of service

Processing the raw ValidateAuthTicketResponse_t callback data panics when the m_eAuthSessionResponse field is k_EAuthSessionResponseAuthTicketNetworkIdentityFailure. This can lead to denial of service in game clients and servers using the begin_authentication_session API to authenticate players if a malicious game client sends an authentication ticket with a network identity that does not match that of the verifier.

(GitHub Advisory)

Miggo Vulnerability Database

→

GHSA-g588-cjg3-6g78

GHSA-g588-cjg3-6g78:

N/A

CVSS Score

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
steamworks	rust	< 0.13.1	0.13.1

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability exists in the steamworks crate because of an incomplete match statement when handling the ValidateAuthTicketResponse_t callback from the Steamworks API. The impl_callback! macro in src/user.rs is used to generate the code that processes this callback. This generated code did not handle the k_EAuthSessionResponseAuthTicketNetworkIdentityFailure variant of the EAuthSessionResponse enum. When the Steamworks API returned this value, the code would hit the unreachable!() macro, causing the entire application to panic and crash. This constitutes a denial of service vulnerability.

A malicious actor could intentionally craft an authentication ticket that would cause the Steamworks API to return this specific error, thereby crashing any game client or server that uses the begin_authentication_session function for P2P authentication.

The patch for this vulnerability, found in commit 0a53391671681c9d5d453416c5fe97e6132a46c2, adds a new match arm to handle the k_EAuthSessionResponseAuthTicketNetworkIdentityFailure case. Instead of panicking, the code now returns an Err(AuthSessionValidateError::AuthTicketNetworkIdentityFailure), allowing the application to handle the error gracefully without crashing.

Vulnerable functions

ValidateAuthTicketResponse::from_raw

src/user.rs

The vulnerability lies in the `impl_callback!` macro expansion for `ValidateAuthTicketResponse_t`. This macro generates a function (conventionally named `from_raw` or similar) to process the callback data. Before the patch, this function did not handle the `k_EAuthSessionResponseAuthTicketNetworkIdentityFailure` case in the `EAuthSessionResponse` enum, leading to a panic through the `unreachable!()` macro. This could be triggered by a remote user, causing a denial of service.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.