SoftEtherVPN Affected by NULL dereference in DeleteIPv6DefaultRouterInRA
Résumé
SoftEtherVPN Affected by NULL dereference in DeleteIPv6DefaultRouterInRA
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in DeleteIPv6DefaultRouterInRA called by StorePacket. Before dereferencing, DeleteIPv6DefaultRouterInRA does not account for ParsePacket returning NULL, resulting in the program crashing. A patched version does not exist at this time.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web github.com
- web github.com