CVE-2024-7596 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary…
Medium CVSS: 6.5

CVE-2024-7596

Proposed Generic UDP Encapsulation (GUE) (IETF Draft) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors.

This can be considered similar to CVE-2020-10136.
Vendor
Ietf
Product
Generic Udp Encapsulation
CWE
NVD-CWE-Other
Yayın Tarihi
2025-02-05 18:15:29
Güncelleme
2025-11-03 21:18:48
Source Identifier
cret@cert.org
KEV Date Added
-

Kategoriler

NVD-CWE-Other Generic Udp Encapsulation MEDIUM Ietf 2025

Referanslar

https://datatracker.ietf.org/doc/draft-ietf-intarea-gue/ https://www.rfc-editor.org/rfc/rfc6169.html https://www.kb.cert.org/vuls/id/199397