CVE-2024-7595: GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet
First published: Wed Feb 05 2025(Updated: )
GRE and GRE6 Protocols (RFC2784) do not validate or verify the source of a network packet allowing an attacker to spoof and route arbitrary traffic via an exposed network interface that can lead to spoofing, access control bypass, and other unexpected network behaviors. This can be considered similar to CVE-2020-10136.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IETF Generic Routing Encapsulation | ||
| IETF Generic Routing Encapsulation |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7595?
CVE-2024-7595 is classified as a medium to high severity vulnerability due to its potential for enabling spoofing and access control bypass.
How do I fix CVE-2024-7595?
To mitigate CVE-2024-7595, implement proper validation and verification of packet sources in your network configurations.
What are the potential impacts of CVE-2024-7595?
The impacts of CVE-2024-7595 can include traffic spoofing, unauthorized access to network resources, and disruption of network operations.
Which software is affected by CVE-2024-7595?
CVE-2024-7595 affects implementations of the Generic Routing Encapsulation and GRE6 protocols as per RFC 2784.
How can I test for CVE-2024-7595 in my network?
You can test for CVE-2024-7595 by assessing your network for the ability to spoof GRE packets and monitoring for unexpected traffic patterns.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/references
- agent/type
- agent/description
- agent/weakness
- agent/first-publish-date
- agent/author
- agent/source
- agent/event
- agent/trending
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ietf
- canonical/ietf generic routing encapsulation