Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2018:1912-1

Опубликовано: 06 июл. 2018
Источник: suse-cvrf

Описание

Security update for openvpn

This update for openvpn fixes the following issues:

  • CVE-2018-9336: Fix potential double-free() in Interactive Service could lead to denial of service (bsc#1090839).

This update was imported from the SUSE:SLE-15:Update update project.

Список пакетов

openSUSE Leap 15.0
openvpn-2.4.3-lp150.3.3.1
openvpn-auth-pam-plugin-2.4.3-lp150.3.3.1
openvpn-devel-2.4.3-lp150.3.3.1
openvpn-down-root-plugin-2.4.3-lp150.3.3.1

Ссылки

Описание

openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.

Затронутые продукты
openSUSE Leap 15.0:openvpn-2.4.3-lp150.3.3.1
openSUSE Leap 15.0:openvpn-auth-pam-plugin-2.4.3-lp150.3.3.1
openSUSE Leap 15.0:openvpn-devel-2.4.3-lp150.3.3.1
openSUSE Leap 15.0:openvpn-down-root-plugin-2.4.3-lp150.3.3.1
Ссылки