Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-7522

Опубликовано: 27 июн. 2017
Источник: nvd
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*
Версия до 2.3.16 (включая)
cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*
cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01262
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20
CWE-476

Связанные уязвимости

CVSS3: 6.5
ubuntu
почти 8 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.

CVSS3: 7.5
redhat
почти 8 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.

CVSS3: 6.5
debian
почти 8 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to deni ...

CVSS3: 6.5
github
около 3 лет назад

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.

EPSS

Процентиль: 78%
0.01262
Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-20
CWE-476