SoftEtherVPN Use-After-Free Vulnerability in Command.c

A use-after-free vulnerability has been identified in SoftEtherVPN version 5.02.5187. The issue arises in the Command.c file within the CheckNetworkAcceptThread function. This vulnerability allows for a stack use-after-scope exception, which can be exploited by running multiple instances of the vpncmd binary and using the VPN Tools check function.

Impact

Exploitation of this vulnerability leads to a stack use-after-scope condition, which can potentially be exploited to execute arbitrary code or cause a crash.

Reproduction

To reproduce this vulnerability, run multiple instances of the vpncmd binary file. Then, use the VPN Tools check function, which will trigger a stack use-after-scope exception in the CheckNetworkAcceptThread function.