Поиск уязвимостей
Количество 19
Количество 19
ALT-PU-2024-4639
ALT-PU-2024-4639: package `openvpn` update to version 2.6.10-alt1
ALT-PU-2024-10885
ALT-PU-2024-10885: package `openvpn` update to version 2.6.12-alt1
CVE-2023-7235
The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.
GHSA-pq76-qjgj-qv82
The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.
CVE-2024-24974
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.
CVE-2024-24974
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.
CVE-2024-24974
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVP ...
GHSA-mfqw-44wg-mrpf
The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.
BDU:2024-07059
Уязвимость программного обеспечения OpenVPN Connect, связанная с недостаточным ограничением канала связи для заданных конечных точек, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
CVE-2024-27903
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
CVE-2024-27903
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
CVE-2024-27903
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be lo ...
CVE-2024-27459
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
CVE-2024-27459
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
CVE-2024-27459
The interactive service in OpenVPN 2.6.9 and earlier allows an attacke ...
GHSA-f6v5-hjxr-p24j
The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.
GHSA-63q4-8wcf-wg8f
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
BDU:2024-07060
Уязвимость программного обеспечения OpenVPN Connect, связанная с переполнением буфера в стеке, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код
BDU:2024-05533
Уязвимость компонента Plug-in Handler программного обеспечения OpenVPN, позволяющая нарушителю загружать произвольные модули
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2024-4639 ALT-PU-2024-4639: package `openvpn` update to version 2.6.10-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-10885 ALT-PU-2024-10885: package `openvpn` update to version 2.6.12-alt1 | CVSS3: 9.8 | около 2 лет назад | |
 | CVE-2023-7235 The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables. | CVSS3: 8.4 | 0% Низкий | больше 2 лет назад |
| GHSA-pq76-qjgj-qv82 The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables. | CVSS3: 8.4 | 0% Низкий | больше 2 лет назад |
 | CVE-2024-24974 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. | CVSS3: 7.5 | 10% Низкий | больше 2 лет назад |
| CVE-2024-24974 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. | CVSS3: 7.5 | 10% Низкий | больше 2 лет назад |
| CVE-2024-24974 The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVP ... | CVSS3: 7.5 | 10% Низкий | больше 2 лет назад |
| GHSA-mfqw-44wg-mrpf The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service. | CVSS3: 7.5 | 10% Низкий | больше 2 лет назад |
 | BDU:2024-07059 Уязвимость программного обеспечения OpenVPN Connect, связанная с недостаточным ограничением канала связи для заданных конечных точек, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код | CVSS3: 7.5 | 10% Низкий | больше 2 лет назад |
| CVE-2024-27903 OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. | CVSS3: 9.8 | 9% Низкий | больше 2 лет назад |
| CVE-2024-27903 OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. | CVSS3: 9.8 | 9% Низкий | больше 2 лет назад |
| CVE-2024-27903 OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be lo ... | CVSS3: 9.8 | 9% Низкий | больше 2 лет назад |
| CVE-2024-27459 The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. | CVSS3: 7.8 | 8% Низкий | больше 2 лет назад |
| CVE-2024-27459 The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. | CVSS3: 7.8 | 8% Низкий | больше 2 лет назад |
| CVE-2024-27459 The interactive service in OpenVPN 2.6.9 and earlier allows an attacke ... | CVSS3: 7.8 | 8% Низкий | больше 2 лет назад |
| GHSA-f6v5-hjxr-p24j The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges. | CVSS3: 7.8 | 8% Низкий | больше 2 лет назад |
| GHSA-63q4-8wcf-wg8f OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service. | CVSS3: 7.2 | 9% Низкий | больше 2 лет назад |
| BDU:2024-07060 Уязвимость программного обеспечения OpenVPN Connect, связанная с переполнением буфера в стеке, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код | CVSS3: 7.8 | 8% Низкий | больше 2 лет назад |
| BDU:2024-05533 Уязвимость компонента Plug-in Handler программного обеспечения OpenVPN, позволяющая нарушителю загружать произвольные модули | CVSS3: 9.8 | 9% Низкий | больше 2 лет назад |
Уязвимостей на страницу