3195 matches found
PT-2020-22729
Name of the Vulnerable Software and Affected Versions openvpn-openssl1 affected versions not specified Description The issue is related to an out of bounds read on the getaddrinfo result. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
PT-2020-22741
Name of the Vulnerable Software and Affected Versions openvpn versions prior to 2.3.9 Description The issue is related to a heap overflow that occurs when processing the result of getaddrinfo. This is caused by a malformed patch file, openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch,...
Astra OpenVPN Server DoS
The vulnerability of the astra-openvpn-server administration system is related to a data processing error. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures by modifying the default file save path...
Amazon Linux AMI : openvpn (ALAS-2020-1410)
The version of openvpn installed on the remote host is prior to 2.4.9-1.23. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1410 advisory. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-...
Medium: openvpn
Issue Overview: This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation.CVE-2020-11810 Affected...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
Authentication flaw
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
CVE-2020-15074 affects OpenVPN Access Server versions older than 2.8.4 and 2.9.5, where reconnects generate new user authentication tokens instead of reusing existing tokens, bypassing the initial token expiry timestamp. The provided documents do not specify affected product versions beyond those...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
PT-2020-14166
Name of the Vulnerable Software and Affected Versions OpenVPN Access Server versions prior to 2.8.4 OpenVPN Access Server versions prior to 2.9.5 Description The issue allows an attacker to circumvent the initial token expiry timestamp by generating new user authentication tokens instead of reusi...
CVE-2020-15074: Authentication Bypass by Assumed-Immutable Data
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15473
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...
DEBIAN-CVE-2020-15473
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...
CVE-2020-15473
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...
Heap overflow
In nDPI through 3.2, the OpenVPN dissector is vulnerable to a heap-based buffer over-read in ndpisearchopenvpn in lib/protocols/openvpn.c...