Skip to content
OpenAdvisories
Medium · 5.9 CVE-2023-22325 EUVD-2023-26488GHSA-93jh-7v3q-c8c6

A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 …

Published Oct 12, 2023 · Updated Aug 2, 2024 · Assigned by talos

Description

A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
SoftEther VPN SoftEther VPN 4.41-9782-beta, 5.01.9674, 5.02 —

References