CVE-2017-7521

Опубликовано: 27 июн. 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().

Ссылки

http://www.debian.org/security/2017/dsa-3900
http://www.securityfocus.com/bid/99230
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038768
https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
Vendor Advisory
http://www.debian.org/security/2017/dsa-3900
http://www.securityfocus.com/bid/99230
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038768
https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*

Версия до 2.3.16 (включая)

cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 66%

0.00523

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-400

CWE-415

Связанные уязвимости

CVE-2017-7521

CVSS3: 5.9

ubuntu

почти 8 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().

CVE-2017-7521

CVSS3: 7.5

redhat

почти 8 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().

CVE-2017-7521

CVSS3: 5.9

debian

почти 8 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remo ...

GHSA-mmxr-6344-9fv5

CVSS3: 5.9

github

около 3 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().

openSUSE-SU-2017:1680-1

suse-cvrf

почти 8 лет назад

Security update for openvpn

EPSS

Процентиль: 66%

0.00523

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-400

CWE-415