CVE-2024-2169 Implementations of UDP application protocols are susceptible to network loops and denial of service

2024-03-1919:50:10

certcc

www.cve.org

cve-2024-2169

implementations

udp

network loops

denial of service

dos

maliciously-crafted packets

vulnerable

EPSS

Percentile

9.0%

JSON

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

CNA Affected

[
  {
    "vendor": "MikroTik",
    "product": "RouterOS-TFTP",
    "versions": [
      {
        "status": "affected",
        "version": "*",
        "lessThanOrEqual": "7.13.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "WDS",
    "versions": [
      {
        "status": "affected",
        "version": "*"
      }
    ]
  },
  {
    "vendor": "dproxy-nexgen",
    "product": "dproxy-nexgen",
    "versions": [
      {
        "status": "affected",
        "version": "0.1",
        "lessThanOrEqual": "0.5",
        "versionType": "custom"
      }
    ]
  }
]

References

kb.cert.org/vuls/id/417980

www.kb.cert.org/vuls/id/417980

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-2169