CVE-2023-35838
1 advisory.
PyPI/wireguard CVE-2023-35838: medium 5.7, EPSS 0.69%
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversa
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2023-321
- https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0015
- https://wireguard.com
- https://tunnelcrack.mathyvanhoef.com/details.html
CVE-2023-35838 · published · modified · JSON