Skip to content
OpenAdvisories
High · 7.5 CVE-2023-22308 EUVD-2023-26471GHSA-8x86-h5jc-fg6v

An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially cr…

Published Oct 12, 2023 · Updated Aug 2, 2024 · Assigned by talos

Description

An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
SoftEther VPN SoftEther VPN 5.01.9674, 5.02 —

References