SB2023070308 - Multiple vulnerabilities in SoftEther VPN
Published: July 3, 2023
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 6 secuirty vulnerabilities.
1) Heap-based buffer overflow (CVE-ID: CVE-2023-27395)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in the DDNS client functionality. A remote attacker can perform a man-in-the-middle attack, trigger a heap-based buffer overflow and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
2) Integer overflow (CVE-ID: CVE-2023-22325)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to integer overflow in the dynamic DNS (DDNS) client function. A remote attacker can perform a man-in-the-middle attack, trigger integer overflow and cause a denial of service condition on the target system.
3) Exposure of Resource to Wrong Sphere (CVE-ID: CVE-2023-32275)
The vulnerability allows a local user to compromise the system.
The vulnerability exists due to exposure of resource to wrong sphere. A local administrator can obtain the starting address of a heap region.
4) Improper access control (CVE-ID: CVE-2023-27516)
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A remote attacker can make an administrative connection if the remote administration feature is accidentally enabled without the password being set.
5) Man-in-the-Middle (MitM) attack (CVE-ID: CVE-2023-32634)
The vulnerability allows a remote attacker to perform a man-in-the-middle (MitM) attack.
The vulnerability exists due to using insecure protocols. A remote attacker can perform a man-in-the-middle attack on communication between the administrator and the VPN Client process.
6) Use of uninitialized resource (CVE-ID: CVE-2023-31192)
The vulnerability allows a remote attacker to bypass certain security restrictions.
The vulnerability exists due to usage of uninitialized resources. A remote user can send a specially crafted packet to the VPN Client, trigger uninitialized usage of resources and obtain an uninitialized stack space value in the VPN Client process.
Remediation
Install update from vendor's website.