The vulnerability of the deferred_auth function in OpenVPN software allows a hacker to force the server to send the PUSH_REPLY message with VPN configuration details before sending the AUTH_FAILED message.

🗓️ 27 Apr 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

OpenVPN deferred_auth flaw lets attacker force PUSH_REPLY with VPN config before AUTH_FAILED, bypassing authentication.

Reporter	Title	Published	Views	Family All 76
IBM Security Bulletins	Security Bulletin: A vulnerability was identified and remediated in the IBM MaaS360 Cloud Extender (V2.103.000.051) and Modules	10 Aug 202120:52	–	ibm
ATTACKERKB	CVE-2020-15078	26 Apr 202114:15	–	attackerkb
Amazon	Important: openvpn	8 Sep 202100:00	–	amazon
Tenable Nessus	Amazon Linux AMI : openvpn (ALAS-2021-1531)	9 Sep 202100:00	–	nessus
Tenable Nessus	Debian DLA-2992-1 : openvpn - LTS security update	3 May 202200:00	–	nessus
Tenable Nessus	FreeBSD : openvpn -- deferred authentication can be bypassed in specific circumstances (efb965be-a2c0-11eb-8956-1951a8617e30)	22 Apr 202100:00	–	nessus
Tenable Nessus	GLSA-202105-25 : OpenVPN: Authentication bypass	24 Jan 202200:00	–	nessus
Tenable Nessus	openSUSE Security Update : openvpn (openSUSE-2021-734)	18 May 202100:00	–	nessus
Tenable Nessus	SUSE SLES11 Security Update : openvpn-openssl1 (SUSE-SU-2021:14723-1)	10 Jun 202100:00	–	nessus
Tenable Nessus	SUSE SLES12 Security Update : openvpn (SUSE-SU-2021:1576-1)	13 May 202100:00	–	nessus

Vulners

Node

openvpn,openvpnRange<2.5.2

OR

openvpn,openvpnRange<2.4.11

Source	Link
opennet	www.opennet.ru/opennews/art.shtml
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
redos	www.redos.red-soft.ru/updatesec/
community	www.community.openvpn.net/openvpn/wiki/CVE-2020-15078
community	www.community.openvpn.net/openvpn/wiki/SecurityAnnouncements
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20211008SE16
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
wiki	www.wiki.astralinux.ru/astra-linux-se47-bulletin-2022-0114SE47
altsp	www.altsp.su/obnovleniya-bezopasnosti/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.1/

14 Nov 2024 00:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 25

CVSS 35.3

EPSS0.05107

OpenVPN deferred authentication push reply authentication bypass