CVE-2025-32787
SoftEtherVPN Affected by NULL dereference in DeleteIPv6DefaultRouterInRA
概要
SoftEtherVPN Affected by NULL dereference in DeleteIPv6DefaultRouterInRA
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in DeleteIPv6DefaultRouterInRA called by StorePacket. Before dereferencing, DeleteIPv6DefaultRouterInRA does not account for ParsePacket returning NULL, resulting in the program crashing. A patched version does not exist at this time.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com