CVE-2025-25566
MEDIUMSoftether VPN - Memory Leak
Title source: ruleDescription
Memory Leak vulnerability in SoftEtherVPN 5.02.5187 allows an attacker to cause a denial of service via the UnixMemoryAlloc function. NOTE: the Supplier disputes this because the behavior is limited to a single allocation of a few hundred bytes with a command-line tool.
Scores
CVSS v3
5.6
EPSS
0.0012
EPSS Percentile
30.5%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-401
Status
published
Affected Products (1)
softether/vpn
Timeline
Published
Mar 12, 2025
Tracked Since
Feb 18, 2026