CVE-2019-12573

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to overwrite arbitrary files. The openvpnlauncher binary is setuid root. This binary supports the --log option, which accepts a path as an argument...

Design/Logic Flaw

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpnlauncher.64 binary is setuid root. This binary accepts several...

PT-2019-12868

Name of the Vulnerable Software and Affected Versions Private Internet Access PIA VPN Client version v82 for Linux Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The issue involves the openvpn launcher.64 binary, which is...

PT-2019-12867

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for macOS Description A local attacker could exploit this issue to run arbitrary code with elevated privileges. The openvpn launcher.64 binary, which is setuid root, creates...

PT-2019-12869

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn launcher.64 binary is setuid root and...

PT-2019-12863

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A local attacker could exploit this issue to overwrite arbitrary files, potentially leading to a denial of service condition and data loss. The openvpn launcher...

PT-2019-12866

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for macOS Description A local, authenticated attacker could run arbitrary code with elevated privileges due to a vulnerability in the openvpn launcher binary, which is setui...

CVE-2019-6628

On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN classifier...

CVE-2019-6628

On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN classifier...

Design/Logic Flaw

On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN classifier...

CVE-2019-6628

On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN classifier...

CVE-2019-6628

CVE-2019-6628 affects BIG-IP PEM when using the OpenVPN classifier. The TMM process may terminate and restart under certain conditions. Affected: BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4. Fixes: 14.1.0.6 and 14.0.0.5. Mitigation (from advisory): disable the OpenVPN classifier or apply the r...

PT-2019-18210

Name of the Vulnerable Software and Affected Versions BIG-IP PEM versions 14.0.0 through 14.0.0.4 BIG-IP PEM versions 14.1.0 through 14.1.0.5 Description The issue occurs under certain conditions where the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN...

CVE-2019-6628: Undefined Security Weakness

On BIG-IP PEM 14.1.0-14.1.0.5 and 14.0.0-14.0.0.4, under certain conditions, the TMM process may terminate and restart while processing BIG-IP PEM traffic with the OpenVPN classifier...

OpenVPN Client 2.0.x < 2.0.6 Remote Code Execution Vulnerability

According to its self-reported version number, the version of OpenVPN client installed on the remote Windows host is 2.0.x prior to 2.0.6. It is, therefore, affected by a remote command execution vulnerability. An unauthenticated remote attacker can exploit this by deploying a malicious OpenVPN...

OpenVPN Server Installed

OpenVPN Server, an open source virtual private network VPN application for Windows, is installed on the remote Windows host. Binary data openvpnserverinstalled.nbin...

OpenVPN 2.4.x < 2.4.6 Denial of Service Vulnerability (Windows)

According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is affected by a denial of service DoS vulnerability in its interactive service helper component due to an invalid level of validation for incoming requests. An unauthenticated, local attack...

OpenVPN < 2.3.15 / 2.4.x < 2.4.2 Denial of Service Vulnerability (Windows)

According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is prior to 2.3.15 or 2.4.x prior to 2.4.2. It is, therefore, affected by a denial of service vulnerability due to the unchecked rolling over of its packet-ID counter. An unauthenticated,...

OpenVPN 2.3.x < 2.3.17 & 2.4.x < 2.4.3 Multiple Denial of Service Vulnerabilites (Windows)

According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is 2.3.x prior to 2.3.17 or 2.4.x prior to 2.4.3. It is, therefore, affected by multiple denial of service DoS vulnerabilities due to invalid input validation. An unauthenticated, remote...

OpenVPN < 2.0.1 Multiple Vulnerabilities (Windows)

According to its self-reported version number, the version of OpenVPN installed on the remote Windows host is prior to 2.0.1. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability exists in OpenVPN due to its OpenSSL error queue not being flushed properly...