Lucene search

K
redosRedosROS-20220329-03
HistoryMar 29, 2022 - 12:00 a.m.

ROS-20220329-03

2022-03-2900:00:00
redos.red-soft.ru
5

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.2%

Vulnerability in the implementation of OpenVPN virtual private network technology due to a bug in the processing of
authentication requests in external authentication plugins, when more than one of them uses delayed authentication responses.
deferred authentication responses. Exploitation of the vulnerability could allow an attacker acting
remotely, bypass the authentication process and gain unauthorized access to the network with only partially
valid credentials

OSVersionArchitecturePackageVersionFilename
redos7.3x86_64openvpn<=Β 2.5.6-1UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.005 Low

EPSS

Percentile

76.2%