Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6qjm-gj5v-hp7g

Опубликовано: 30 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6
CVSS3: 8.1

Описание

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

EPSS

Процентиль: 33%
0.00398
Низкий

6 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.1
ubuntu
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

CVSS3: 5.9
redhat
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

CVSS3: 8.1
nvd
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote authenticated peers to trigger a use-after-free during TLS session promotion, potentially leading to a denial of service or memory leakage

CVSS3: 8.1
debian
19 дней назад

An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 thr ...

CVSS3: 9.1
fstec
около 2 месяцев назад

Уязвимость функции check_session_buf_not_used() механизма tls-crypt-v2 программного обеспечения OpenVPN, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации, вызвать отказ в обслуживании или выполнить произвольный код

EPSS

Процентиль: 33%
0.00398
Низкий

6 Medium

CVSS4

8.1 High

CVSS3

Дефекты

CWE-416