Описание
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 2.4.0-5ubuntu1 |
| bionic | not-affected | 2.4.0-5ubuntu1 |
| cosmic | not-affected | 2.4.0-5ubuntu1 |
| devel | not-affected | 2.4.0-5ubuntu1 |
| disco | not-affected | 2.4.0-5ubuntu1 |
| eoan | not-affected | 2.4.0-5ubuntu1 |
| esm-infra-legacy/trusty | released | 2.3.2-7ubuntu3.2 |
| esm-infra-legacy/xenial | released | 2.3.10-1ubuntu2.1 |
| esm-infra/bionic | not-affected | 2.4.0-5ubuntu1 |
| esm-infra/focal | not-affected | 2.4.0-5ubuntu1 |
Показывать по
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3
Связанные уязвимости
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reac ...
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
ALT-PU-2017-1606: package `openvpn` update to version 2.4.2-alt1
EPSS
4 Medium
CVSS2
6.5 Medium
CVSS3