CVE-2022-0547: debian debian_linux
CVSS: 9.8v3.1CriticalModified
AliasesALPINE-CVE-2022-0547MGASA-2022-0123SUSE-SU-2022:1024-1SUSE-SU-2022:1029-1SUSE-SU-2022:14937-1SUSE-SU-2022:1934-1UBUNTU-CVE-2022-0547USN-5347-1USN-6850-1DEBIAN-CVE-2022-0547openSUSE-SU-2022:1029-1openSUSE-SU-2024:11968-1
Published 18-03-2022Last modified 03-11-2025
Vulnerability summary
CVE-2022-0547 is a critical (CVSS 9.8) vulnerability in debian debian_linux. EPSS estimates a 3.57% chance of exploitation in the next 30 days, higher than 89.2% of scored vulnerabilities.
CVSS score
9.8/10
010
Critical · v3.1 (CVE.org)EPSS score
3.57%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 2Timeline
- 18-03-2022PublishedVulnerability first disclosed.
- 03-11-2025Last modifiedVulnerability information updated.
Description
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
CVSS metrics
6 scores · 5 sources · 2 versionsCritical 9.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSourcesAll 5 agree
- OSV · AlpineEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- NVDNIST9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
High 7.5Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
3.57%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.57% on 20-09-2026
20-09-202620-10-2026
EPSS score3.57%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-305Authentication Bypass by Primary WeaknessThe authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Suse36 products
- openvpn-openssl1&distro=SUSE Linux Enterprise Server 11-SECURITY< 2.3.2-0.10.12.1
- openvpn&distro=HPE Helion OpenStack 8< 2.3.8-16.29.1
- openvpn&distro=SUSE Enterprise Storage 6< 2.4.3-150000.5.10.1
- openvpn&distro=SUSE Enterprise Storage 7< 2.4.3-150000.5.10.1
- openvpn&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 2.4.3-150000.5.10.1
Opensuse3 products
- openvpn&distro=openSUSE Leap 15.3< 2.4.3-150000.5.10.1
- openvpn&distro=openSUSE Leap 15.4< 2.5.6-150400.3.3.1
- openvpn&distro=openSUSE Tumbleweed< 2.5.6-1.1
Debian2 products
- openvpn< 2.5.6-1
- debian_linuxEOL9.0
Alpine1 product
- openvpn≥ 2.1.0, < 2.4.12-r0 | ≥ 2.1.0, < 2.5.6-r0
Fedoraproject1 product
- fedoraEOL34 | 36
Mageia1 product
- openvpn< 2.5.0-2.2.mga8
Openvpn1 product
- openvpn≥ 2.1.0, < 2.4.12 | ≥ 2.5.0, < 2.5.6
Ubuntu1 product
- openvpn< 2.5.5-1ubuntu3 | < 2.4.4-2ubuntu1.7 | < 2.4.7-1ubuntu2.20.04.4 | < 2.3.2-7ubuntu3.2+esm1 | < 2.3.10-1ubuntu2.2+esm1
8 vendors · 46 products
References
25 links
lists.debian.org/debian-lts-announce/2022/05/msg00002.htmlMailing ListX Refsource MLISTThird Party Advisory
Show all 25 references
- lists.opensuse.org/archives/…Advisory