Implementations of UDP-based application protocols are vulnerable to network loops

ronjor · Mar 21, 2024

Original Release Date: 2024-03-19 | Last Revised: 2024-03-20

Description
The User Datagram Protocol (UDP) is a simple, connectionless protocol that is still commonly used in many internet-based applications. UDP has a limited packet-verification capability and is susceptible to IP spoofing.
Click to expand...

Security researchers have identified that certain implementations of the UDP protocol in applications can be triggered to create a network-loop of seemingly never-ending packets. Software implementations of UDP-based application protocols DNS, NTP, TFTP, Echo (RFC862), Chargen (RFC864), and QOTD (RFC865) were specifically found to be vulnerable to such network loops.
Click to expand...

Solution
Apply updates
Click to expand...

Log in or Sign up

Implementations of UDP-based application protocols are vulnerable to network loops

ronjor Global Moderator

Log in or Sign up

Implementations of UDP-based application protocols are vulnerable to network loops

ronjor Global Moderator

Useful Searches