What’s Vulnerable › Vulnerabilities

CVE-2024-2169: Implementations of UDP application protocols are susceptible to network loops and denial of service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-19 · updated 2026-06-17

Description

Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

Affected products

• Dproxy-Nexgen Project Dproxy-Nexgen: from 0.1 through 0.5
• Microsoft WDS: all versions
• MikroTik Routeros Tftp: through 7.13.2
• dproxy-nexgen: from 0.1 through 0.5
• Microsoft WDS: all versions
• MikroTik RouterOS-TFTP: through 7.13.2

References

• https://kb.cert.org/vuls/id/417980
• https://www.kb.cert.org/vuls/id/417980
• http://www.openwall.com/lists/oss-security/2024/09/04/1
• https://kb.cert.org/vuls/id/417980
• https://www.kb.cert.org/vuls/id/417980

Get alerted when CVE-2024-2169 or the next vulnerability affects your stack