https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 11:43:16 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14006 bdu:2025-14006 https://cve.radiocsirt.org/vuln/bdu:2025-14006 https://cve.radiocsirt.org/vuln/euvd-2026-212217 EUVD-2026-212217 https://cve.radiocsirt.org/vuln/euvd-2026-212217 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24356 <p>fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This &#34;fast reconnect&#34; avoids having to wait for a session timeout (up to ~90s) until a new connection is established. Even a 1-byte UDP packet just containing the fastd packet type header can trigger a much larger handshake packet (~150 bytes of UDP payload). Including IPv4 and UDP headers, the resulting amplification factor is roughly 12-13. By sending data packets with a spoofed source address to fastd instances reachable on the internet, this amplification of UDP traffic might be used to facilitate a Distributed Denial of Service attack. This vulnerability is fixed in v23.</p> <p>fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This &#34;fast reconnect&#34; avoids having to wait for a session timeout (up to ~90s) until a new connection is established. Even a 1-byte UDP packet just containing the fastd packet type header can trigger a much larger handshake packet (~150 bytes of UDP payload). Including IPv4 and UDP headers, the resulting amplification factor is roughly 12-13. By sending data packets with a spoofed source address to fastd instances reachable on the internet, this amplification of UDP traffic might be used to facilitate a Distributed Denial of Service attack. This vulnerability is fixed in v23.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-24356 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24356 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fastd, Ubuntu:18.04:LTS: fastd, Ubuntu:20.04:LTS: fastd, Ubuntu:22.04:LTS: fastd, Ubuntu:24.04:LTS: fastd</p> <p>fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This &#34;fast reconnect&#34; avoids having to wait for a session timeout (up to ~90s) until a new connection is established. Even a 1-byte UDP packet just containing the fastd packet type header can trigger a much larger handshake packet (~150 bytes of UDP payload). Including IPv4 and UDP headers, the resulting amplification factor is roughly 12-13. By sending data packets with a spoofed source address to fastd instances reachable on the internet, this amplification of UDP traffic might be used to facilitate a Distributed Denial of Service attack. This vulnerability is fixed in v23.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: fastd, Ubuntu:18.04:LTS: fastd, Ubuntu:20.04:LTS: fastd, Ubuntu:22.04:LTS: fastd, Ubuntu:24.04:LTS: fastd</p> <p>fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake packet. This &#34;fast reconnect&#34; avoids having to wait for a session timeout (up to ~90s) until a new connection is established. Even a 1-byte UDP packet just containing the fastd packet type header can trigger a much larger handshake packet (~150 bytes of UDP payload). Including IPv4 and UDP headers, the resulting amplification factor is roughly 12-13. By sending data packets with a spoofed source address to fastd instances reachable on the internet, this amplification of UDP traffic might be used to facilitate a Distributed Denial of Service attack. This vulnerability is fixed in v23.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-24356