Openvpn Technologies, Inc Openvpn vulnerabilities
6 vulnerabilities
Known vulnerabilities in Openvpn Technologies, Inc Openvpn, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2017-7508debianopenvpn+8
EPSS score4.76%
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.CVE-2017-7479alpineopenvpn+4EPSS score1.85%
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.CVE-2017-7478alpineopenvpn+3EPSS score13.78%
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.CVE-2017-7522debianopenvpn+3EPSS score5.54%
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.CVE-2017-7520debianopenvpn+3EPSS score3.38%
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.CVE-2017-7521debianopenvpn+3EPSS score3.85%
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extract_x509_extension().