Поиск уязвимостей
Количество 12
Количество 12
ALT-PU-2020-3324
ALT-PU-2020-3324: package `openvpn` update to version 2.4.9-alt1
CVE-2020-20813
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
CVE-2020-20813
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
CVE-2020-20813
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers t ...
CVE-2020-11810
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.
CVE-2020-11810
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.
CVE-2020-11810
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can ...
GHSA-6mpq-5wjj-48jg
Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet.
GHSA-6crj-vqv7-qq9r
An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.
BDU:2020-01777
Уязвимость программного обеспечения OpenVPN, существущая из-за недостаточной проверки входных данных, позволяющая нарушителю перевести сеанс клиента на новый IP-адрес и вызвать отказ в обслуживании
openSUSE-SU-2021:0734-1
Security update for openvpn
SUSE-SU-2021:1577-1
Security update for openvpn
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2020-3324 ALT-PU-2020-3324: package `openvpn` update to version 2.4.9-alt1 | CVSS3: 7.5 | почти 6 лет назад | |
 | CVE-2020-20813 Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
 | CVE-2020-20813 Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
| CVE-2020-20813 Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers t ... | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
| CVE-2020-11810 An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use. | CVSS3: 3.7 | 2% Низкий | больше 6 лет назад |
| CVE-2020-11810 An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use. | CVSS3: 3.7 | 2% Низкий | больше 6 лет назад |
| CVE-2020-11810 An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can ... | CVSS3: 3.7 | 2% Низкий | больше 6 лет назад |
| GHSA-6mpq-5wjj-48jg Control Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service via crafted reset packet. | CVSS3: 7.5 | 1% Низкий | около 3 лет назад |
| GHSA-6crj-vqv7-qq9r An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use. | CVSS3: 3.7 | 2% Низкий | больше 4 лет назад |
 | BDU:2020-01777 Уязвимость программного обеспечения OpenVPN, существущая из-за недостаточной проверки входных данных, позволяющая нарушителю перевести сеанс клиента на новый IP-адрес и вызвать отказ в обслуживании | CVSS3: 3.7 | больше 6 лет назад | |
 | openSUSE-SU-2021:0734-1 Security update for openvpn | больше 5 лет назад | ||
| SUSE-SU-2021:1577-1 Security update for openvpn | больше 5 лет назад |
Уязвимостей на страницу