PatchTheCVEpunkbuster vulnerabilities and fixes
Recent CVEs affecting punkbuster, with upgrade or downgrade steps. 4 tracked.
punkbuster has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2023-08-16. Highest priority: CVE-2020-26037 (score 60/100).
- CVE-2020-26037 CRITICAL 9.8 UPGRADE Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905
- CVE-2009-3924 HIGH 9.3 MITIGATE UPGRADE Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balanc
- CVE-2006-2587 MEDIUM 5.0 DOWNGRADE Buffer overflow in the WebTool HTTP server component in (1) PunkBuster before 1.229, as used by multiple produ
- CVE-2006-0771 MEDIUM 6.4 UPGRADE Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly oth
FAQ
How do I fix punkbuster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is punkbuster being exploited right now?
None of the tracked punkbuster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which punkbuster CVE should I patch first?
CVE-2020-26037 currently ranks highest (60/100): Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905.