CVE search · CVE-2024-7596
CVE-2024-7596
medium 6.5
Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered similar to CVE-2020-10136.
Details
- Status
- Modified
- Published
- Last changed
- Source
- cret@cert.org
- Weakness
- NVD-CWE-Other
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 6.5 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L |
nvd@nist.govPrimary |
| CVSS 3.1 | medium 5.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
134c704f-9b21-4f2e-91b3-4a467353bcc0Secondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- ietf · generic_udp_encapsulation
References
- https://datatracker.ietf.org/doc/draft-ietf-intarea-gue/Technical DescriptionRelated
- https://www.rfc-editor.org/rfc/rfc6169.htmlTechnical DescriptionRelated
- https://www.kb.cert.org/vuls/id/199397