CVE-2023-35838: Medium severity wireguard vulnerability
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-35838?
CVE-2023-35838 has been assessed as a high severity vulnerability due to its potential impact on network traffic and security.
How do I fix CVE-2023-35838?
To mitigate CVE-2023-35838, you should update the WireGuard client to a version that resolves this configuration issue.
What systems are affected by CVE-2023-35838?
CVE-2023-35838 specifically affects the WireGuard client version 0.5.3 on Windows systems.
What kind of attack does CVE-2023-35838 enable?
CVE-2023-35838 allows an attacker to block legitimate IP traffic to specified addresses, disrupting normal network connectivity.
Is there a workaround for CVE-2023-35838?
Currently, the best workaround for CVE-2023-35838 is to avoid using WireGuard client version 0.5.3 until the issue is patched.