Vulnerability · Published Jun 26, 2024 · Assigned by GitHub_M

CVE-2024-38520SoftEther VPN with L2TP - 2.75x Amplification

Medium 5.3

In plain English

A medium-severity uncontrolled resource consumption in SoftEtherVPN from SoftEtherVPN. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.5%top 56.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. When SoftEtherVPN is deployed with L2TP enabled on a device, it introduces the possibility of the host being used for amplification/reflection traffic generation because it will respond to every packet with two response packets that are larger than the request packet size. These sorts of techniques are used by external actors who generate spoofed source IPs to target a destination on the internet. This vulnerability has been patched in version 5.02.5185.

Affected products (as reported)

Vendor	Product	Versions
SoftEtherVPN	SoftEtherVPN	<= 5.02.5183

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References

https://github.com/SoftEtherVPN/SoftEtherVPN/security/advisories/GHSA-j35p-p8pj-vqxq x_refsource_CONFIRM
https://github.com/SoftEtherVPN/SoftEtherVPN/commit/c2a7aa548137dc80c6aafdc645cf4dc34e0dc764 x_refsource_MISC
https://github.com/SoftEtherVPN/SoftEtherVPN/releases/tag/5.02.5185 x_refsource_MISC