An integer overflow vulnerability in the fatedier frp reverse proxy allows remote, unauthenticated attackers to cause a denial of service condition.

This issue stems from improper validation of array indices (CWE-129) and integer overflows (CWE-190), which can lead to application crashes when processing malformed network traffic. This vulnerability is exploitable by an unauthenticated remote attacker.

Successful exploitation results in the crashing of the frp service, leading to service disruption for any traffic relying on the proxy. Given the CVSS score of 8.7, the impact on availability is significant for organizations that depend on frp for connectivity. Downtime caused by this vulnerability could result in operational delays and potential loss of business continuity.

Immediate Action: Update the frp deployment to version 0.70.1 or later.

Proactive Monitoring: Review system logs for frequent service restarts or unexpected crashes related to the frp process.

Compensating Controls: Deploy a Web Application Firewall or network filter to drop malformed packets that might trigger the integer overflow condition.

Public Exploit Available: No confirmed public exploit (no weaponized module or curated PoC confirmed in available data).

The presence of a proof-of-concept makes this vulnerability an urgent priority. Administrators should apply the 0.70.1 update immediately to ensure service stability and prevent potential denial of service attacks.