Openvpn 2 (Community) vulnerabilities

2 vulnerabilities

Known vulnerabilities in Openvpn 2 (Community), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2023-46849alpineopenvpn+8
EPSS score
1.15%
Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an application crash, leading to a denial of service.9.8CVE-2023-46850alpineopenvpn+8
EPSS score
2.00%
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.