Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD92F30415-9935-11E2-AD4C-080027EF73EC
HistoryMar 19, 2013 - 12:00 a.m.

OpenVPN -- potential side-channel/timing attack when comparing HMACs

2013-03-1900:00:00
vuxml.freebsd.org
12

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.9%

JSON

The OpenVPN project reports:

OpenVPN 2.3.0 and earlier running in UDP mode are subject
to chosen ciphertext injection due to a non-constant-time
HMAC comparison function.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchopenvpn< 2.0.9_4UNKNOWN

Related

cve 1
nessus 11
openvas 8
kaspersky 1
amazon 1
fedora 2
securityvulns 2
prion 1
debiancve 1
ubuntu 1
cvelist 1
ubuntucve 1
nvd 1
gentoo 1
cve
cve
CVE-2013-2061
2013-11-18 02:55:07
nessus
nessus
Mandriva Linux Security Advisory : openvpn (MDVSA-2013:167)
2013-05-28 00:00:00
Amazon Linux AMI : openvpn (ALAS-2013-201)
2013-09-04 00:00:00
Ubuntu 12.04 LTS : openvpn vulnerability (USN-2368-1)
2014-10-03 00:00:00
openvas
openvas
Fedora Update for openvpn FEDORA-2013-7552
2013-05-17 00:00:00
Amazon Linux: Security Advisory (ALAS-2013-201)
2015-09-08 00:00:00
Fedora Update for openvpn FEDORA-2013-7531
2013-05-17 00:00:00
kaspersky
kaspersky
KLA10281 OSI vulnerability in OpenVPN
2013-11-17 00:00:00
amazon
amazon
Low: openvpn
2013-06-11 22:47:00
fedora
fedora
[SECURITY] Fedora 17 Update: openvpn-2.3.1-2.fc17
2013-05-16 02:50:42
[SECURITY] Fedora 18 Update: openvpn-2.3.1-2.fc18
2013-05-16 03:04:28
securityvulns
securityvulns
OpenVPN cryptography weakness
2013-06-05 00:00:00
[ MDVSA-2013:167 ] openvpn
2013-06-05 00:00:00
prion
prion
Code injection
2013-11-18 02:55:00
debiancve
debiancve
CVE-2013-2061
2013-11-18 02:55:07
ubuntu
ubuntu
OpenVPN vulnerability
2014-10-02 00:00:00
cvelist
cvelist
CVE-2013-2061
2013-11-15 18:16:00
ubuntucve
ubuntucve
CVE-2013-2061
2013-11-17 00:00:00
nvd
nvd
CVE-2013-2061
2013-11-18 02:55:07
gentoo
gentoo
OpenVPN: Multiple vulnerabilities
2013-11-20 00:00:00

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

0.005 Low

EPSS

Percentile

75.9%

JSON
Related for 92F30415-9935-11E2-AD4C-080027EF73EC
cve1nessus11openvas8kaspersky1amazon1fedora2securityvulns2prion1debiancve1ubuntu1cvelist1ubuntucve1nvd1gentoo1