### [CVE-2023-22308](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22308)
![](https://img.shields.io/static/v1?label=Product&message=SoftEther%20VPN&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%205.01.9674%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-191%3A%20Integer%20Underflow%20(Wrap%20or%20Wraparound)&color=brighgreen)

### Description

An integer underflow vulnerability exists in the vpnserver OvsProcessData functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.

### POC

#### Reference
- https://talosintelligence.com/vulnerability_reports/TALOS-2023-1737

#### Github
No PoCs found on GitHub currently.