Every CVE Search/ Get API key

CVE-2015-4016

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service...

5.0 Medium

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.

Exploit likelihood

2.97%Up 1.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.

Record
CVE-2015-4016
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.

Record
CVE-2015-4016
Updated
2026-11-02
EUVDEUVD-2015-4046 No score

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.

Record
EUVD-2015-4046
Updated
2026-11-03
GitHub AdvisoriesGHSA-6m3m-x8f4-hwpp No score

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service...

The client detection protocol in Valve Steam allows remote attackers to cause a denial of service (process crash) via a crafted response to a broadcast packet.

Record
GHSA-6m3m-x8f4-hwpp
Weakness
CWE-20
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-4016 is a medium vulnerability (CVSS 5.0) in Valvesoftware Steam Client, published May 20, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.97%, the 87th percentile. No source names a fixed version.

References

MoveEnter Open