Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2368-1
HistoryOct 02, 2014 - 12:00 a.m.

OpenVPN vulnerability

2014-10-0200:00:00
ubuntu.com
40

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON

Releases

  • Ubuntu 12.04

Packages

  • openvpn - virtual private network software

Details

It was discovered that OpenVPN incorrectly handled HMAC comparisons when
running in UDP mode. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could possibly be used to perform a
plaintext recovery attack.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchopenvpn< 2.2.1-8ubuntu1.3UNKNOWN

Related

cve 1
nessus 11
openvas 8
kaspersky 1
amazon 1
fedora 2
ubuntucve 1
securityvulns 2
nvd 1
cvelist 1
freebsd 1
prion 1
debiancve 1
gentoo 1
cve
cve
CVE-2013-2061
2013-11-18 02:55:07
nessus
nessus
Mandriva Linux Security Advisory : openvpn (MDVSA-2013:167)
2013-05-28 00:00:00
Amazon Linux AMI : openvpn (ALAS-2013-201)
2013-09-04 00:00:00
Ubuntu 12.04 LTS : openvpn vulnerability (USN-2368-1)
2014-10-03 00:00:00
openvas
openvas
Fedora Update for openvpn FEDORA-2013-7552
2013-05-17 00:00:00
Ubuntu: Security Advisory (USN-2368-1)
2014-10-03 00:00:00
Fedora Update for openvpn FEDORA-2013-7531
2013-05-17 00:00:00
kaspersky
kaspersky
KLA10281 OSI vulnerability in OpenVPN
2013-11-17 00:00:00
amazon
amazon
Low: openvpn
2013-06-11 22:47:00
fedora
fedora
[SECURITY] Fedora 17 Update: openvpn-2.3.1-2.fc17
2013-05-16 02:50:42
[SECURITY] Fedora 18 Update: openvpn-2.3.1-2.fc18
2013-05-16 03:04:28
ubuntucve
ubuntucve
CVE-2013-2061
2013-11-17 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:167 ] openvpn
2013-06-05 00:00:00
OpenVPN cryptography weakness
2013-06-05 00:00:00
nvd
nvd
CVE-2013-2061
2013-11-18 02:55:07
cvelist
cvelist
CVE-2013-2061
2013-11-15 18:16:00
freebsd
freebsd
OpenVPN -- potential side-channel/timing attack when comparing HMACs
2013-03-19 00:00:00
prion
prion
Code injection
2013-11-18 02:55:00
debiancve
debiancve
CVE-2013-2061
2013-11-18 02:55:07
gentoo
gentoo
OpenVPN: Multiple vulnerabilities
2013-11-20 00:00:00

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.9%

JSON
Related for USN-2368-1
cve1nessus11openvas8kaspersky1amazon1fedora2ubuntucve1securityvulns2nvd1cvelist1freebsd1prion1debiancve1gentoo1