ROS-2-448

2.448 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability Description: A corrective release of the OpenVPN Virtual Private Networking Package 2.4.9 has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

ROS-2-1175

2.1175 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability description: A corrective release of the OpenVPN 2.4.9 virtual private networking package has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

ROS-2-641

2.641 Vulnerability in OpenVPN CVE-2020-11810 1. Vulnerability description: A corrective release of the OpenVPN 2.4.9 virtual private networking package has been generated. The new version addresses a vulnerability CVE-2020-11810 that allows a client session to be transferred to a new IP address...

ROS-2-1234

2.1234 OpenVPN Authentication Bypass CVE-2020-15078 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass authentication and access restrictions to leak VPN configuration data. The issue only occurs on servers that are configured to use deferredauth. Under certain...

ROS-2-1186

2.1186 OpenVPN Authentication Bypass CVE-2020-15078 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass authentication and access restrictions to leak VPN configuration data. The issue only occurs on servers that are configured to use deferredauth. Under certain...

PT-2022-10663

Name of the Vulnerable Software and Affected Versions netfilter affected versions not specified Description A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks. Recommendations At the moment,...

ROS-2-459

2.459 OpenVPN Authentication Bypass CVE-2020-15078 1. Vulnerability Description: The vulnerability allows a remote attacker to bypass authentication and access restrictions to leak VPN configuration data. The issue only occurs on servers that are configured to use deferredauth. Under certain...

Important: openvpn

Issue Overview: OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks. CVE-2020-15078 Affected Packages: openvpn...

Design/Logic Flaw

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

CVE-2021-33526 Privilege escalation in mbDIALUP <= 3.9R0.0

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

CVE-2021-33526

CVE-2021-33526 affects MB connect line mbDIALUP versions

CVE-2021-33526: Improper Privilege Management

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

MB connect line mbDIALUP: Input validation error vulnerability

MB connect line mbDIALUP is an application from MB connect line. Developed by MB Connect Line GmbH for use by a Software Informer user. An input validation error vulnerability exists in MB connect line mbDIALUP, which originates in MB connect line mbDIALUP version = 3.9R0.0, and can be exploited ...

MB connect line mbDIALUP security vulnerability

MB connect line mbDIALUP is an application from MB connect line. Developed by MB Connect Line GmbH for a Software Informer user. A security vulnerability exists in mbDIALUP, which originates in MB connect line mbDIALUP version = 3.9R0.0, and can be exploited by a low-privileged attacker to send a...

CVE-2021-33526

In MB connect line mbDIALUP versions = 3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service...

openvpn:fuzz_proxy: Stack-buffer-overflow in unicodize

Detailed Report: https://oss-fuzz.com/testcase?key=4909025455112192 Project: openvpn Fuzzing Engine: honggfuzz Fuzz Target: fuzzproxy Job Type: honggfuzzasanopenvpn Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 1 Crash Address: 0x7fff8ccc9320 Crash State: unicodize ntlmphase3...

openvpn:fuzz_misc: Dynamic-stack-buffer-overflow in SHA1_Update

Project: https://github.com/OpenVPN/openvpn.git Detailed Report: https://oss-fuzz.com/testcase?key=5096785675681792 Project: openvpn Fuzzing Engine: afl Fuzz Target: fuzzmisc Job Type: aflasanopenvpn Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow READ Crash Address: 0x7fff0e371921...

openvpn:fuzz_forward: Dynamic-stack-buffer-overflow in gc_init

Project: https://github.com/OpenVPN/openvpn.git Detailed Report: https://oss-fuzz.com/testcase?key=4931569402904576 Project: openvpn Fuzzing Engine: afl Fuzz Target: fuzzforward Job Type: aflasanopenvpn Platform Id: linux Crash Type: Dynamic-stack-buffer-overflow WRITE 16 Crash Address:...

OpenVPN OpenSSL Code Execution

The vulnerability of the OpenSSL library used in OpenVPN software is related to errors in the path validation mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

MGASA-2021-0344 Updated webmin package fixes security vulnerability

The webmin package has been updated to version 1.979, which has fixes for handling un-trusted inputs in the Network Configuration module. Also, the openvpn module has been updated to version 3.2...