cve/2024/CVE-2024-2169.md

### [CVE-2024-2169](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-2169)
![](https://img.shields.io/static/v1?label=Product&message=RouterOS-TFTP&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=WDS&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=dproxy-nexgen&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20*%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=*%3C%3D%207.13.2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=0.1%3C%3D%200.5%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-406%3A%20Insufficient%20Control%20of%20Network%20Message%20Volume%20(Network%20Amplification)&color=brighgreen)

### Description

Implementations of UDP application protocol are vulnerable to network loops.   An unauthenticated attacker can use maliciously-crafted packets against a vulnerable implementation that can lead to Denial of Service (DOS) and/or abuse of resources.

### POC

#### Reference
- https://kb.cert.org/vuls/id/417980
- https://www.kb.cert.org/vuls/id/417980

#### Github
- https://github.com/NaInSec/CVE-LIST
- https://github.com/douglasbuzatto/G3-Loop-DoS
- https://github.com/nomi-sec/PoC-in-GitHub