openvpnserv.exe in OpenVPN 2.4.x before 2.4.6 allows local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation
Reporter | Title | Published | Views | Family All 23 |
---|---|---|---|---|
![]() | CVE-2018-9336 | 1 May 201818:29 | – | nvd |
![]() | SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2018:1888-1) | 2 Jan 201900:00 | – | nessus |
![]() | Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / 14.2 / current : openvpn (SSA:2018-116-01) | 27 Apr 201800:00 | – | nessus |
![]() | OpenVPN 2.4.x < 2.4.6 Denial of Service Vulnerability (Windows) | 17 May 201900:00 | – | nessus |
![]() | openSUSE Security Update : openvpn (openSUSE-2018-705) | 9 Jul 201800:00 | – | nessus |
![]() | openSUSE Security Update : openvpn (openSUSE-2019-507) | 27 Mar 201900:00 | – | nessus |
![]() | Slackware: Security Advisory (SSA:2018-116-01) | 21 Apr 202200:00 | – | openvas |
![]() | Mageia: Security Advisory (MGASA-2018-0329) | 28 Jan 202200:00 | – | openvas |
![]() | openSUSE: Security Advisory for openvpn (openSUSE-SU-2018:1912-1) | 26 Oct 201800:00 | – | openvas |
![]() | SUSE: Security Advisory (SUSE-SU-2018:1888-1) | 9 Jun 202100:00 | – | openvas |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo