Skip to content
OpenAdvisories
Medium WID-SEC-2024-0672 3 CVEs

UDP-basierte Protokollimplementierungen: Mehrere Schwachstellen ermöglichen Denial of Service

Published Mar 19, 2024 · Updated Mar 19, 2024 · de-DE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in UDP-basierten Protokollimplementierungen ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Das User Datagram Protocol (UDP) ist ein einfaches, verbindungsloses Protokoll, das in vielen internetbasierten Anwendungen verwendet wird.

Vulnerabilities 3

  • High 7.5
    CVE-2024-2169 Public exploit

    Implementations of UDP application protocols are susceptible to network loops and denial of service

    Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

    Microsoft MikroTik dproxy-nexgen WDS Network devices
  • Medium 6.5
    CVE-2024-1309

    Resource Consumption Identified in NTP before 4.2.4p8 and 4.2.5

    Uncontrolled Resource Consumption vulnerability in Honeywell Niagara Framework on Windows, Linux, QNX allows Content Spoofing.This issue affects Niagara Framework: before Niagara AX 3.8.1, before Niagara 4.1.

    Honeywell Niagara Framework ICS / OT
  • Unscored —
    CVE-2009-3563 Public exploit EPSS 32%

    ntp_request.c in ntpd in NTP before 4.2.4p8, and 4.2.5, allows remote attackers to cause a denial of service (CPU and b…

    ntp Debian

Revision history

  1. #1

    Initiale Fassung

References