OpenVPN — свободная реализация технологии виртуальной частной сети (VPN) с открытым исходным кодом для создания зашифрованных каналoв типа точка-точка или сервер-клиенты между компьютерами.
Релизный цикл, информация об уязвимостях
График релизов
Количество 191
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple ex ...
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
GHSA-mfqw-44wg-mrpf
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.
GHSA-63q4-8wcf-wg8f
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
GHSA-f6v5-hjxr-p24j
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
CVE-2024-27903
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
CVE-2024-27903
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be lo ...
CVE-2024-27459
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
CVE-2024-27459
The interactive service in OpenVPN 2.6.9 and earlier allows an attacke ...
CVE-2024-24974
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
CVE-2024-28882 OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple ex ... | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
CVE-2024-28882 OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session | CVSS3: 4.3 | 0% Низкий | больше 1 года назад | |
GHSA-mfqw-44wg-mrpf The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. | CVSS3: 7.5 | 11% Средний | больше 1 года назад | |
GHSA-63q4-8wcf-wg8f OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. | CVSS3: 7.2 | 7% Низкий | больше 1 года назад | |
GHSA-f6v5-hjxr-p24j The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. | CVSS3: 7.8 | 5% Низкий | больше 1 года назад | |
CVE-2024-27903 OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. | CVSS3: 9.8 | 7% Низкий | больше 1 года назад | |
CVE-2024-27903 OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be lo ... | CVSS3: 9.8 | 7% Низкий | больше 1 года назад | |
CVE-2024-27459 The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. | CVSS3: 7.8 | 5% Низкий | больше 1 года назад | |
CVE-2024-27459 The interactive service in OpenVPN 2.6.9 and earlier allows an attacke ... | CVSS3: 7.8 | 5% Низкий | больше 1 года назад | |
CVE-2024-24974 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. | CVSS3: 7.5 | 11% Средний | больше 1 года назад |
Уязвимостей на страницу