CVE-2024-38520

CVE-2024-38520 affects SoftEtherVPN when L2TP is enabled. The issue allows the host to be used for amplification/reflection traffic because the VPN responds to every packet with two responses larger than the request, enabling spoofed IPs to target a destination. The vulnerability is fixed in vers...