Wireguard Wireguard 0.5.3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wireguard:wireguard:0.5.3:*:*:*:*:*:*:*

part: a version: 0.5.3 update: *

VendorWireguard (6b5f9c49-f546-5fe5-b01a-3c669f5e0166)
ProductWireguard (d60abeda-bc73-5884-9b9b-eaf8567fbd37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35838 vulnerable 2026-06-08 06:06:27.880103 Details available
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.
Published: 2023-08-09T00:00:00.000Z
Updated: 2024-10-18T19:02:08.462Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-46873 vulnerable 2026-06-08 05:38:06.228754 Details available
WireGuard, such as WireGuard 0.5.3 on Windows, does not fully account for the possibility that an adversary might be able to set a victim's system time to a future value, e.g., because unauthenticated NTP is used. This can lead to an outcome in which one static private key becomes permanently useless.
Published: 2023-01-29T00:00:00.000Z
Updated: 2025-03-28T15:47:37.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.