Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Grand Theft Auto V exploit assigned CVE number due to partial RCE

cve.mitre.org

Post reply on HN
Print view View original

21–30 of 42 posts

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#21

Post by tialaramex »

wnevets wrote: post #11

I'm surprised more exploits aren't being found in games, they're usually thrown together as quickly as possible.

Ordinarily there's no reason why you would "attack" the game, so things only get found if a significant community arises for the game which would benefit, e.g. speed running Mario 64 is a thing, so figuring out weird details of the engine is crucial to the best possible times in categories which allow you to break the game to win.

For a Remote Code Execution bug like this it only makes sense if it's a popular multiplayer game, so that there are enough targets to be worth attacking, for long enough after release that you can identify a bug and figure out how to abuse it.

GTA V is like a decade old at this point, there a very few games with that sort of longevity, we're talking Minecraft, WoW, big hits rather than the average video game.

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#22

Post by BxGyw2 »

poly_morphis wrote: post #14
BxGyw2 wrote: post #12

Earlier quoted context omitted.

Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…

How do you game in a VM? A lot of my game time includes flight simulators with many external peripherals.

Not gonna lie and pretend I know how it works but qemu is capable of passing USB devices into VMs while they are connected and visible to the host kernel, and this works perfectly for me for joysticks, steering wheels and other shit

For mouse and keyboard I just use the evdev forwarding thing where you press both ctrl keys to swap between host and guest

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#23

Post by gruez »

poly_morphis wrote: post #14
BxGyw2 wrote: post #12

Earlier quoted context omitted.

Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…

How do you game in a VM? A lot of my game time includes flight simulators with many external peripherals.

external peripherals is probably the easy part, given that usb passthrough almost always "just works" in my experience. The bigger problem is getting GPU passthrough working.

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#24

Post by lfodofod »

mjg59 wrote: post #6

I feel like I'm missing something here, but: the references are two support forum threads and a reddit thread, both of which link back to the referenced twitter thread? Is there any actual confirmation that this RCE exists? What does "partial RCE" even mean?

It really appears that this CVE was issued based on that super vague twitter thread.

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#25

Post by BxGyw2 »

simooooo wrote: post #16
BxGyw2 wrote: post #12

Earlier quoted context omitted.

Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…

How do you play any game with anti-cheat in a VM?

Depends on the game. The answer for me is I'm not really interested in flavour of the month online shooter games so it's never been an issue but I know plenty of people who are and just continue to modify their VM until it's not detected - it's always gonna be something you can do to hide from the AC

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#26

Post by OatmealDome »

rektide wrote: post #2

FWIW, > CVE-2023-24059 What other video games have had CVE's?

CVE-2022-47949

A bunch of first-party Nintendo Switch, Wii U, and 3DS games had a buffer overflow bug in a shared netcode library ("enl") which can be exploited by a remote attacker just by connecting to them in online play.

Affected titles included Mario Kart 7, Mario Kart 8, Mario Kart 8 Deluxe, Splatoon, Splatoon 2, Splatoon 3, ARMS, Super Mario Maker 2, and Nintendo Switch Sports. (The Wii U games remain unpatched.)

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#27

Post by pabs3 »

rektide wrote: post #2

FWIW, > CVE-2023-24059 What other video games have had CVE's?

I heard EVE Online had server-side RCE exploits many years ago, not sure if it got a CVE though. I expect all games have some sort of security bug, even the completely offline ones get speedruns that exploit memory bugs to win faster.

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#28

Post by wnevets »

tialaramex wrote: post #21
wnevets wrote: post #11

I'm surprised more exploits aren't being found in games, they're usually thrown together as quickly as possible.

Ordinarily there's no reason why you would "attack" the game, so things only get found if a significant community arises for the game which would benefit, e.g. speed running Mario 64 is a thing, so figuring out weird details of the engine is crucial to the best possible times in categories which allow you to break the game to win. For a Remote Code Execution bug like this it only makes sense if it's a popular multipl…

Video games being connected to the internet 24/7 are quickly becoming the norm. I am convinced there is a treasure trove of exploits created by the gaming industry just waiting to be found.

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#29

Post by rektide »

pabs3 wrote: post #27
rektide wrote: post #2

FWIW, > CVE-2023-24059 What other video games have had CVE's?

I heard EVE Online had server-side RCE exploits many years ago, not sure if it got a CVE though. I expect all games have some sort of security bug, even the completely offline ones get speedruns that exploit memory bugs to win faster.

My favorite EVE Online issue isn't a RCE/CVE, but rather just a general fuckup, where they, in an update, accidentally deleted the Windows boot.ini file off people's computers, rendering them unable to boot. https://www.eveonline.com/news/view/about-the-boot.ini-issue

Re: Grand Theft Auto V exploit assigned CVE number due to partial RCE

#30

Post by jamesfinlayson »

simooooo wrote: post #16
BxGyw2 wrote: post #12

Earlier quoted context omitted.

Source Engine CVE-2021-30481 There's actually been a lot more of these that don't get CVEs It's one of the reasons I prefer to game in a VM with heavy network filtering and egress only through VPN There is little to no care from game developers about security, games with actively exploitable RCEs (see pretty much the whole CoD franchise) are just allowed to stay up on Steam Gamers are also kinda dumb and oblivious to…

How do you play any game with anti-cheat in a VM?

Which anti-cheat would be triggered by running in a VM? I thought VAC worked by detecting runtime patching of .dll files.
Post reply on HN