Описание
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 2.4.0-5ubuntu2 |
| esm-infra-legacy/trusty | not-affected | 2.3.2-7ubuntu3.2 |
| esm-infra/xenial | not-affected | 2.3.10-1ubuntu2.1 |
| precise/esm | not-affected | 2.2.1-8ubuntu1.5 |
| trusty | released | 2.3.2-7ubuntu3.2 |
| trusty/esm | not-affected | 2.3.2-7ubuntu3.2 |
| upstream | released | 2.4.3, 2.3.17 |
| vivid/ubuntu-core | DNE | |
| xenial | released | 2.3.10-1ubuntu2.1 |
| yakkety | released | 2.3.11-1ubuntu2.1 |
Показывать по
EPSS
4 Medium
CVSS2
7.4 High
CVSS3
Связанные уязвимости
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to deni ...
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
Уязвимость пакета OpenVPN, существующая из-за неправильной обработки клиентских подключений к HTTP-прокси, позволяющая нарушителю выполнить произвольный код
EPSS
4 Medium
CVSS2
7.4 High
CVSS3