Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xv5w-q5wq-r3c3

Опубликовано: 03 дек. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 4.6
CVSS3: 7.5

Описание

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

EPSS

Процентиль: 18%
0.00058
Низкий

4.6 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-940

Связанные уязвимости

CVSS3: 7.5
ubuntu
2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
nvd
2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.6.15 and 2.7_alpha1 through 2.7_rc1 allows an attacker to open a session from a different IP address which did not initiate the connection resulting in a denial of service for the originating client

CVSS3: 7.5
debian
2 месяца назад

Improper validation of source IP addresses in OpenVPN version 2.6.0 th ...

CVSS3: 7.3
fstec
3 месяца назад

Уязвимость функции memcmp() программного обеспечения OpenVPN, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 18%
0.00058
Низкий

4.6 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-940