Lucene search
Alpine Linux Development TeamALPINE:CVE-2018-9336HistoryMay 01, 2018 - 6:29 p.m.
CVE-2018-9336
2018-05-0118:29:00
Alpine Linux Development Team
security.alpinelinux.org
9
0.0004 Low
EPSS
Percentile
5.2%
openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.10-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.11-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.12-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.13-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.14-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.15-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.16-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.17-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
| Alpine | 3.18-main | noarch | openvpn | < 2.4.6-r0 | UNKNOWN |
Related
suse
suse
Security update for openvpn (moderate)
2018-07-07 00:12:45
mageia
mageia
Updated openvpn packages fix security vulnerability
2018-08-10 17:37:39
nessus
nessus
SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2018:1888-1)
2019-01-02 00:00:00
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : openvpn (SSA:2018-116-01)
2018-04-27 00:00:00
OpenVPN 2.4.x < 2.4.6 Denial of Service Vulnerability (Windows)
2019-05-17 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2018-0329)
2022-01-28 00:00:00
Slackware: Security Advisory (SSA:2018-116-01)
2022-04-21 00:00:00
openSUSE: Security Advisory for openvpn (openSUSE-SU-2018:1912-1)
2018-10-26 00:00:00
cve
cve
CVE-2018-9336
2018-05-01 18:29:00
ubuntucve
ubuntucve
CVE-2018-9336
2018-05-01 00:00:00
osv
osv
CVE-2018-9336
2018-05-01 18:29:00
prion
prion
Double free
2018-05-01 18:29:00
debiancve
debiancve
CVE-2018-9336
2018-05-01 18:29:00
cvelist
cvelist
CVE-2018-9336
2018-05-01 18:00:00
slackware
slackware
[slackware-security] openvpn
2018-04-27 04:43:21