CVE-2023-25774

CVE-2023-25774: Talos reports a denial-of-service in SoftEther VPN 5.01.9674 and 5.02 due to a vulnerability in vpnserver ConnectionAccept() that can exhaust resources by spawning many threads. Root cause appears to be synchronization/locking leading to long delays and eventual server crash under...

CVE-2023-23581

CVE-2023-23581 is a SoftEther VPN vulnerability in the vpnserver EnSafeHttpHeaderValueStr function. Talos confirms denial-of-service via specially crafted network packets, affecting SoftEther VPN server versions 5.01.9674 and 5.02. The root cause is an out-of-bounds read triggered during HTTP hea...

CVE-2023-23581

A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service...

PT-2023-20294

Name of the Vulnerable Software and Affected Versions SoftEther VPN version 5.02 Description A denial-of-service issue exists in the ConnectionAccept functionality of the vpnserver. It can be triggered by a set of specially crafted network connections, allowing an attacker to send malicious packe...

CVE-2023-23581: Out-of-bounds Read

A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service...

PT-2023-19058 · Softether · Softether Vpn

Name of the Vulnerable Software and Affected Versions: SoftEther VPN versions 5.01.9674 through 5.02 Description: A denial-of-service issue exists in the vpnserver EnSafeHttpHeaderValueStr functionality. It can be triggered by a specially crafted network packet, leading to denial of service...

CVE-2023-27395: Heap-based Buffer Overflow

A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this...

CVE-2023-22308: Integer Underflow (Wrap or Wraparound)

An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability...

PT-2023-18416

Name of the Vulnerable Software and Affected Versions SoftEther VPN versions 5.01.9674 through 5.02 Description An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality. A specially crafted network packet can lead to denial of service. An attacker can send a malicio...

SoftEther VPN vpnserver WpcParsePacket() heap-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1735 SoftEther VPN vpnserver WpcParsePacket heap-based buffer overflow vulnerability October 12, 2023 CVE Number CVE-2023-27395 SUMMARY A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket functionality of SoftEther VPN...

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect

Peplink NGxxx/LCxxx VPN-Firewall Open Redirect Vulnerability Vendor: Qingdao Xunbo Information Technology Co., Ltd. Product web page: http://www.peplink.net Affected version: PEPLINK NG300 VPN-Firewall PEPLINK NG320-VPN-Firewall PEPLINK NG500-VPN-Firewall PEPLINK NG520-VPN-Firewall PEPLINK...