The Patching Friars' AlmanacA calendar of CVE saints

Patron of February 17

Dota 2Holy card for dota2-custom-map, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 Dota 2 MAPPA INSIDIOSA
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint Dota 2, of the Custom Maps

Patron of home-made maps, invitations to unknown matches, and players who accept everything.

Life

On 17 February 2020 CVE-2020-9005 was catalogued: a library in Valve's Dota 2 mishandled some custom-map data. An attacker could set up a game server with a crafted map and invite the victim, getting code execution or a game crash. A match where the loser was not the team, but the computer.

Prayer

O Saint Dota 2, who welcomes every map into your arena, teach us to decline invitations from strangers. Amen.

How to celebrate

Celebrated by letting Steam update the game and playing only in lobbies you trust.

Technical record

Disclosed on
February 17 2020
CVE
CVE-2020-9005

meshsystem.dll in Valve Dota 2 through 2020-02-17 allows remote attackers to achieve code execution or denial of service by creating a gaming server with a crafted map, and inviting a victim to this server. A GetValue call is mishandled.

Sources: nvd.nist.gov

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.