PT-2023-8738 · Softether · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN versions 4.41-9782-beta through 5.02 Description: A denial of service issue exists in the DCRegister functionality of SoftEther VPN, related to the DDNS RPC MAX RECV SIZE. This can be triggered by a specially crafted network...

OSV-2022-709 Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50105 Crash type: Heap-buffer-overflow READ 10 Crash state: dissectsoftetherhostfqdn ndpisearchsoftether checkndpidetectionfunc...

PT-2022-37182 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow READ 10 crash occurred, involving the functions dissect softether host fqdn, ndpi search softether, and check ndpi detection func...

ndpi:fuzz_process_packet: Heap-buffer-overflow in dissect_softether_host_fqdn

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5496916305117184 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 10 Crash Address: 0x60d0000004d1 Crash Stat...

OSV-2022-691 Heap-buffer-overflow in dissect_softether_host_fqdn

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49901 Crash type: Heap-buffer-overflow READ 1 Crash state: dissectsoftetherhostfqdn ndpisearchsoftether checkndpidetectionfunc...

PT-2022-37172 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which was identified through an OSS-Fuzz report. The crash involves several functions, including...

ndpi:fuzz_process_packet: Heap-buffer-overflow in dissect_softether_host_fqdn

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5075608702418944 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x60c00000047f Crash State...

OSV-2022-670 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49736 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

ndpi:fuzz_process_packet: Heap-buffer-overflow in dissect_softether_ip_port

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=4669363180929024 Project: ndpi Fuzzing Engine: afl Fuzz Target: fuzzprocesspacket Job Type: aflasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6040000000c0 Crash State...

OSV-2022-661 Heap-buffer-overflow in dissect_softether_ip_port

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49638 Crash type: Heap-buffer-overflow READ 4 Crash state: dissectsoftetheripport ndpisearchsoftether checkndpidetectionfunc...

PT-2022-37152

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the dissect softether ip port, ndpi search softether,...

ndpi:fuzz_process_packet: Heap-buffer-overflow in dissect_softether_ip_port

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5187721726918656 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6040000000b8...

CVE-2019-11868

See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...

CVE-2019-11868

See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...

Code injection

See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...

CVE-2019-11868

See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...

CVE-2019-11868

CVE-2019-11868 affects SoftEther VPN Server with See.sys up to v4.25 (v4.29 or older). The issue allows a user to call an IOCTL that can specify any kernel address, enabling arbitrary bytes to be written to that address. This is described in multiple sources (NVD/Red Hat) as a local ability to wr...

CVE-2019-11868: Out-of-bounds Write

See.sys, up to version 4.25, in SoftEther VPN Server versions 4.29 or older, allows a user to call an IOCTL specifying any kernel address to which arbitrary bytes are written to...

PT-2019-12529

Name of the Vulnerable Software and Affected Versions SoftEther VPN Server versions up to 4.29 See.sys up to version 4.25 Description The issue allows a user to call an IOCTL, specifying any kernel address to which arbitrary bytes are written. This can potentially lead to unauthorized access and...