CVE-2024-2169 Implementations of UDP application protocols are susceptible to network loops and denial of service
Unauthenticated attackers can cause denial of service and resource abuse in UDP protocol implementations via malicious packets.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-2169?
CVE-2024-2169 is a high-severity denial of service vulnerability in Microsoft RouterOS-TFTP, published on 19 Mar 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Implementations of UDP application protocol are vulnerable to network loops. An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.
Which versions are affected by CVE-2024-2169?
How do I fix CVE-2024-2169?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2024-2169 being exploited?
There is no known exploitation of CVE-2024-2169 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-324p-3f7r-2rf5, MGASA-2024-0290.