Adguard
CVE-2023-41173
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets.
AnalysisAI
AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Uncontrolled Resource Consumption (CWE-400), which allows attackers to cause denial of service by exhausting system resources. AdGuard DNS before 2.2 allows remote attackers to cause a denial of service via malformed UDP packets. Affected products include: Adguard Adguard Dns. Version information: before 2.2.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement rate limiting, set resource quotas, validate input sizes, use timeouts.
TrustTunnel versions prior to 0.9.114 fail to validate private network restrictions when processing numeric IP addresses
Auth bypass in AdGuard Home before 0.107.73.
In AdGuardHome, versions v0.95 through v0.108.0-b.13 are vulnerable to Cross-Site Request Forgery (CSRF), in the custom
TrustTunnel VPN protocol versions prior to 0.9.115 contain a rule bypass vulnerability where fragmented TLS ClientHello
An issue was discovered in AdGuard before 0.105.2. Rated high severity (CVSS 7.5), this vulnerability is remotely exploi
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today