Threats tagged 'ghsa-q6fh-5v6v-c65x'

Cudy TR3000 devices running firmware versions before 2.5.42 have a stack buffer overflow vulnerability in the stun_client TR-111 UDP Connection Request parser. This flaw occurs because the parser processes requests before verifying authentication, allowing remote attackers to send a specially crafted UDP datagram that overflows a 10-byte stack buffer and crashes the stun_client, resulting in denial of service.