IETF Proposed Generic UDP Encapsulation Vulnerability Allowing Traffic Spoofing and Access Control Bypass

A vulnerability exists in the IETF Draft for Generic UDP Encapsulation (GUE) because it does not validate the source of network packets. This oversight allows attackers to spoof and route arbitrary traffic through an exposed network interface, potentially leading to spoofing, bypassing access controls, and other unexpected network behaviors. The issue is similar to that described in CVE-2020-10136.

Impact

Exploitation of this vulnerability could result in spoofing, bypassing access controls, and causing other unexpected network behaviors.