Skip to content
OpenAdvisories
High · 7.5 CVE-2023-25774 EUVD-2023-29671GHSA-8jpm-94jj-mfm6

A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially crafte…

Published Oct 12, 2023 · Updated Aug 2, 2024 · Assigned by talos

Description

A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially crafted network connections can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
SoftEther VPN SoftEther VPN 5.01.9674, 5.02 —

References