CVE-2020-7224

Опубликовано: 16 апр. 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.

Ссылки

https://docs.aviatrix.com/#security-bulletin
Vendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html
Vendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001
Vendor Advisory
https://docs.aviatrix.com/#security-bulletin
Vendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html
Vendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aviatrix:openvpn:*:*:*:*:*:*:*:*

Версия до 2.5.7 (включая)

EPSS

Процентиль: 69%

0.00619

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-2w3j-7x55-5cx2