debian/fastd vulnerabilities

Latest debian/fastd CVEs

Newest publication first

1. CVE-2025-24356 UDP traffic amplification via fastd's fast reconnect feature

   Published 2025-01-27

   Medium·CVSS 6.9 EPSS 0.71%

   fastd is a VPN daemon which tunnels IP packets and Ethernet frames over UDP. When receiving a data packet from an unknown IP address/port combination, fastd will assume that one of its connected peers has moved to a new address and initiate a reconnect by sending a handshake pack...

2. DLA-2414-1 fastd - security update

   Published 2020-10-25

   Unknown

3. CVE-2020-27638 receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code.

   Published 2020-10-22

   High·CVSS 7.5 EPSS 2.4%

   receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.