3059 matches found
PT-2020-22903
Уязвимость программного обеспечения для создания частной виртуальной сети astra-openvpn-server связана с некорректно заданными границами переменной. Эксплуатация уязвимости позволяет нарушителю, действующему удаленно, вызвать отказ в обслуживании...
SUSE SLES12 Security Update : openvpn (SUSE-SU-2020:2359-1)
This update for openvpn fixes the following issues : openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch was malformed in a way that caused patch1 to ignore it. bsc959714 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security...
SUSE-SU-2020:2359-1 Security update for openvpn
This update for openvpn fixes the following issues: - openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch was malformed in a way that caused patch1 to ignore it. bsc959714...
SUSE-SU-2020:14468-1 Security update for openvpn-openssl1
This update for openvpn-openssl1 fixes the following issues: - Fixed Out of bounds read on getaddrinfo result bsc959714...
PT-2020-22741
Name of the Vulnerable Software and Affected Versions openvpn versions prior to 2.3.9 Description The issue is related to a heap overflow that occurs when processing the result of getaddrinfo. This is caused by a malformed patch file, openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch,...
PT-2020-22729
Name of the Vulnerable Software and Affected Versions openvpn-openssl1 affected versions not specified Description The issue is related to an out of bounds read on the getaddrinfo result. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
The vulnerability of the astra-openvpn-server administration system, related to data processing errors, allows a hacker to trigger a service failure.
The vulnerability of the astra-openvpn-server administration system is related to a data processing error. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures by modifying the default file save path...
Amazon Linux AMI : openvpn (ALAS-2020-1410)
The version of openvpn installed on the remote host is prior to 2.4.9-1.23. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1410 advisory. This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-...
Medium: openvpn
Issue Overview: This security issue is quite hard to abuse, requiring a fairly precise timing attack combined with guessing a just assigned peer-id reference. If successful, only a single client just initiating a new connection will experience a denial of service situation.CVE-2020-11810 Affected...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
Authentication flaw
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
CVE-2020-15074
CVE-2020-15074 affects OpenVPN Access Server versions older than 2.8.4 and 2.9.5, where reconnects generate new user authentication tokens instead of reusing existing tokens, bypassing the initial token expiry timestamp. The provided documents do not specify affected product versions beyond those...
CVE-2020-15074: Authentication Bypass by Assumed-Immutable Data
OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp...
PT-2020-14166
Name of the Vulnerable Software and Affected Versions OpenVPN Access Server versions prior to 2.8.4 OpenVPN Access Server versions prior to 2.9.5 Description The issue allows an attacker to circumvent the initial token expiry timestamp by generating new user authentication tokens instead of reusi...