Поиск уязвимостей
Количество 25
Количество 25
ALT-PU-2024-10642
ALT-PU-2024-10642: package `openvpn` update to version 2.6.12-alt1
ALT-PU-2024-10885
ALT-PU-2024-10885: package `openvpn` update to version 2.6.12-alt1
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple ex ...
SUSE-SU-2024:3532-1
Security update for openvpn
SUSE-SU-2024:3502-1
Security update for openvpn
GHSA-v34q-j8xh-hjgx
OpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
BDU:2024-06537
Уязвимость программного обеспечения OpenVPN, связанная с отсутствием высвобождения ресурса после окончания срока его действия, позволяющая нарушителю «сохранить сеанс», даже если серверу было приказано отключить этого клиента
ROS-20240816-06
Уязвимость openvpn
CVE-2024-4877
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
CVE-2024-4877
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
CVE-2024-4877
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, le ...
CVE-2024-5594
OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.
CVE-2024-5594
OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.
CVE-2024-5594
OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly wh ...
GHSA-c26r-vw7p-2m7h
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
BDU:2025-03850
Уязвимость службы Interactive Service (iservice) клиента OpenVPN GUI программного обеспечения OpenVPN, позволяющая нарушителю получить несанкционированный доступ к учетной записи пользователя
SUSE-SU-2025:1131-1
Security update for openvpn
SUSE-SU-2025:1053-2
Security update for openvpn
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2024-10642 ALT-PU-2024-10642: package `openvpn` update to version 2.6.12-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
| ALT-PU-2024-10885 ALT-PU-2024-10885: package `openvpn` update to version 2.6.12-alt1 | CVSS3: 9.8 | около 2 лет назад | |
 | CVE-2024-28882 OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
 | CVE-2024-28882 OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
| CVE-2024-28882 OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple ex ... | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:3532-1 Security update for openvpn | 1% Низкий | около 2 лет назад | |
| SUSE-SU-2024:3502-1 Security update for openvpn | 1% Низкий | около 2 лет назад | |
| GHSA-v34q-j8xh-hjgx OpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
 | BDU:2024-06537 Уязвимость программного обеспечения OpenVPN, связанная с отсутствием высвобождения ресурса после окончания срока его действия, позволяющая нарушителю «сохранить сеанс», даже если серверу было приказано отключить этого клиента | CVSS3: 4.3 | 1% Низкий | больше 2 лет назад |
 | ROS-20240816-06 Уязвимость openvpn | CVSS3: 4.3 | 1% Низкий | около 2 лет назад |
| CVE-2024-4877 OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
| CVE-2024-4877 OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
| CVE-2024-4877 OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, le ... | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
| CVE-2024-5594 OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад |
| CVE-2024-5594 OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs. | CVSS3: 9.1 | 1% Низкий | почти 2 года назад |
| CVE-2024-5594 OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly wh ... | CVSS3: 9.1 | 1% Низкий | почти 2 года назад |
| GHSA-c26r-vw7p-2m7h OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges | CVSS3: 8.8 | 0% Низкий | больше 1 года назад |
| BDU:2025-03850 Уязвимость службы Interactive Service (iservice) клиента OpenVPN GUI программного обеспечения OpenVPN, позволяющая нарушителю получить несанкционированный доступ к учетной записи пользователя | CVSS3: 5.7 | 0% Низкий | больше 2 лет назад |
| SUSE-SU-2025:1131-1 Security update for openvpn | 1% Низкий | больше 1 года назад | |
| SUSE-SU-2025:1053-2 Security update for openvpn | 1% Низкий | больше 1 года назад |
Уязвимостей на страницу