CVE-2023-42801
Description
Moonlight-common-c contains the core GameStream client code shared between Moonlight clients. Moonlight-common-c is vulnerable to buffer overflow starting in commit f57bd745b4cbed577ea654fad4701bea4d38b44c. A malicious game streaming server could exploit a buffer overflow vulnerability to crash a moonlight client. Achieving RCE is possible but unlikely, due to stack canaries in use by modern compiler toolchains. The published binaries for official clients Qt, Android, iOS/tvOS, and Embedded are built with stack canaries, but some unofficial clients may not use stack canaries. This vulnerability takes place after the pairing process, so it requires the client to be tricked into pairing to a malicious host. It is not possible to perform using a man-in-the-middle due to public key pinning that takes place during the pairing process. The bug was addressed in commit b2497a3918a6d79808d9fd0c04734786e70d5954.
How to fix
- moonlight-stream moonlight-common-c2023-10-06 or later
- moonlight-stream moonlight9.0.0, 12.0, 0.10.23 or later
- moonlight-stream moonlight_embedded2.6.1 or later
- moonlight-stream moonlight_tv1.6.0 or later
- moonlight-stream moonlight_switch0.13.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moonlight-stream moonlight-common-c | 2016-10-05 ≤ v < 2023-10-06 | 2023-10-06 |
| moonlight-stream moonlight | v < 9.0.0, v < 12.0, v < 0.10.23 | 9.0.0, 12.0, 0.10.23 |
| moonlight-stream moonlight_embedded | v < 2.6.1 | 2.6.1 |
| moonlight-stream moonlight_xbox | v ≤ 1.14.5 | — |
| moonlight-stream moonlight_tv | v < 1.6.0 | 1.6.0 |
| moonlight-stream moonlight_switch | v < 0.13.4 | 0.13.4 |
| moonlight-stream moonlight_vita | No range specified | — |
| moonlight-stream moonlight_qt\/pc | v ≤ 5.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.