{"id":"CVE-2024-2169","aliases":["EUVD-2024-27133","GHSA-324p-3f7r-2rf5","MGASA-2024-0290"],"status":"published","title":"Implementations of UDP application protocols are susceptible to network loops and denial of service","description":"Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.05397,"percentile":0.92745,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2024-03-19T19:50:10Z","modified":"2026-06-17T07:23:51Z","exploits":[{"source":"pocgithub","id":"renancesarr/G3-Loop-DoS","title":"renancesarr/G3-Loop-DoS","date":"2024-03-29","url":"https://github.com/renancesarr/G3-Loop-DoS"}],"fixes":[{"ecosystem":"Mageia:9","package":"webmin","fixed_in":["2.202-1.mga9"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:9","package":"webmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.202-1.mga9"}]}]}],"products":[{"vendor":"dproxy-nexgen","product":"dproxy-nexgen"},{"vendor":"dproxy-nexgen_project","product":"dproxy-nexgen"},{"vendor":"microsoft","product":"wds"},{"vendor":"mikrotik","product":"routeros-tftp"},{"vendor":"mikrotik","product":"routeros_tftp"}],"references":[{"url":"https://kb.cert.org/vuls/id/417980","tags":["x_transferred"]},{"url":"https://www.kb.cert.org/vuls/id/417980","tags":["x_transferred"]},{"url":"http://www.openwall.com/lists/oss-security/2024/09/04/1"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-2169"},{"url":"https://github.com/advisories/GHSA-324p-3f7r-2rf5"},{"url":"https://advisories.mageia.org/MGASA-2024-0290.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=33521","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2024/09/04/1","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-2169","title":"Implementations of UDP application protocols are susceptible to network loops and denial of service","description":"Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.","status":"published","published":"2024-03-19T19:50:10.7Z","modified":"2024-09-04T12:04:51.23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:34:09.540667Z"}],"euvd":[{"id":"EUVD-2024-27133","description":"Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.","status":"published","published":"2024-03-19T19:50:10Z","modified":"2024-09-04T12:04:51Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:05.029422Z"}],"ghsa":[{"id":"GHSA-324p-3f7r-2rf5","title":"Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated...","description":"Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.","status":"published","published":"2024-03-20T15:32:21Z","modified":"2024-08-02T18:31:09Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T14:57:50.552665Z"}],"nvd":[{"id":"CVE-2024-2169","description":"Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.","status":"published","published":"2024-03-19T20:15:07.32Z","modified":"2026-06-17T07:23:51.48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:09:41.654534Z"}],"osv":[{"id":"MGASA-2024-0290","title":"Updated webmin package fixes security vulnerability","description":"CVE-2024-2169: Implementations of UDP application protocol are\nvulnerable to network loops. An unauthenticated attacker can use\nmaliciously-crafted packets against a vulnerable implementation that can\nlead to Denial of Service (DOS) and/or abuse of resources.\n","status":"published","published":"2024-09-10T16:40:31Z","modified":"2026-04-16T04:42:44.458140473Z","updated_at":"2026-11-02T15:49:42.684501Z"}]}}