Threats tagged 'ghsa-jff7-8p33-28j3'

The Proposed Generic UDP Encapsulation (GUE) IETF draft does not validate or verify the source of network packets. This flaw allows an attacker to spoof and route arbitrary traffic through an exposed network interface, potentially leading to spoofing, access control bypass, and other unexpected network behaviors. The vulnerability is similar in nature to CVE-2020-10136. It has a medium severity rating with a CVSS score of 6.5.