openvpn openvpn access server vulnerabilities and exploits

(subscribe to this query)

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.

Openvpn Openvpn Openvpn Openvpn Access Server Debian Debian Linux 12.0 Fedoraproject Fedora 39

OpenVPN Access Server 2.8.x prior to 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication).

Openvpn Openvpn Access Server

An issue exists in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the malicious user to gain access to the client's...

Mikrotik Routeros 6.41.4

Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an malicious user to trigger a divide by zero behaviour which could cause an application crash, leading to a denial of service.

Openvpn Openvpn Openvpn Openvpn Access Server Openvpn Openvpn Access Server 2.12.1 Openvpn Openvpn Access Server 2.12.0 Debian Debian Linux 12.0 Fedoraproject Fedora 39

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

Openvpn Openvpn Access Server

The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and prior to 2.11.0 may contain a random generated admin password

Openvpn Openvpn Access Server

OpenVPN Access Server prior to 2.11 uses a weak random generator used to create user session token for the web portal

Openvpn Openvpn Access Server

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote malicious users to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.

Openvpn Openvpn Access Server

OpenVPN 2.5.1 and previous versions versions allows a remote malicious users to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Openvpn Openvpn Fedoraproject Fedora 32 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 20.10 Canonical Ubuntu Linux 21.04 Debian Debian Linux 9.0

1 Github repository

OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.

Openvpn Openvpn Access Server

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook