CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
CVE-2022-0547- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-305, CWE-287
- Updated
- 2026-11-02
CVE List
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
CVE-2022-0547- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-305
- Updated
- 2026-11-02
EUVDEUVD-2022-15669
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
EUVD-2022-15669- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g28r-w65r-h89m
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
GHSA-g28r-w65r-h89m- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-287, CWE-305
- Updated
- 2026-11-02
OSVALPINE-CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
ALPINE-CVE-2022-0547- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSV
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
CVE-2022-0547- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-305
- Updated
- 2026-11-02
Show 16 moreShow less
OSVDEBIAN-CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
DEBIAN-CVE-2022-0547- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
OSVOESA-2022-1612
openvpn security update
OpenVPN can be extended through the --plugin option, which provides possibilities to add specialized authentication, user accounting, packet filtering and related features. These plug-ins need to be written in C and provides a more low-level and information rich access to similar features as the various script-hooks.
Security Fix(es):
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.(CVE-2022-0547)
- Record
OESA-2022-1612- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
- Record
UBUNTU-CVE-2022-0547- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVCLSA-2022-1649170601 No score
Fix CVE(s): CVE-2022-0547
- SECURITY UPDATE: authentication bypass via multiple deferred
authentication plug-ins
- debian/patches/CVE-2022-0547.patch: disallow multiple deferred authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c.
- CVE-2022-0547
- Record
CLSA-2022-1649170601- Updated
- 2026-11-02
OSVCLSA-2022-1649170882 No score
Fixed CVE-2022-0547 in openvpn
- CVE-2022-0547: Fix authentication bypass via multiple deferred authentication plug-ins
- Record
CLSA-2022-1649170882- Updated
- 2026-11-02
OSVCLSA-2022-1649171018 No score
Fix of CVE: CVE-2022-0547
- CVE-2022-0547: Fix authentication bypass via multiple deferred authentication plug-ins
- Record
CLSA-2022-1649171018- Updated
- 2026-11-02
OSVCLSA-2025-1761082098 No score
Fix CVE(s): CVE-2022-0547
- SECURITY UPDATE: Authentication bypass in external authentication
plug-ins with only partially correct credentials
- debian/patches/CVE-2022-0547.patch: disallow multiple deferred authentication plug-ins
- CVE-2022-0547
- Update sample keys for testing
- debian/sample-keys/*
- debian/rules
- debian/source/include-binaries
- Record
CLSA-2025-1761082098- Updated
- 2026-11-02
OSVMGASA-2022-0123 No score
Updated openvpn packages fix security vulnerability
Potential authentication by-pass with multiple deferred authentication plug-ins. (CVE-2022-0547)
- Record
MGASA-2022-0123- Updated
- 2026-11-02
OSVopenSUSE-SU-2022:1029-1 No score
Security update for openvpn
This update for openvpn fixes the following issues:
- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
- Record
openSUSE-SU-2022:1029-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11968-1 No score
openvpn-2.5.6-1.1 on GA media
These are all security issues fixed in the openvpn-2.5.6-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11968-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1024-1 No score
Security update for openvpn
This update for openvpn fixes the following issues:
- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
- Record
SUSE-SU-2022:1024-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1029-1 No score
Security update for openvpn
This update for openvpn fixes the following issues:
- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
- Record
SUSE-SU-2022:1029-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:14937-1 No score
Security update for openvpn-openssl1
This update for openvpn-openssl1 fixes the following issues:
- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
- Record
SUSE-SU-2022:14937-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:1934-1 No score
Security update for openvpn
This update for openvpn fixes the following issues:
-
CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).
-
By default the --suppress-timestamps flag is not needed (bsc#1123557).
- Record
SUSE-SU-2022:1934-1- Updated
- 2026-11-02
OSVUSN-5347-1 No score
openvpn vulnerability
It was discovered that OpenVPN incorrectly handled certain configurations with multiple authentication plugins. A remote attacker could possibly use this issue to bypass authentication using incomplete credentials.
- Record
USN-5347-1- Updated
- 2026-11-02
OSVUSN-6850-1 No score
openvpn vulnerability
It was discovered that OpenVPN incorrectly handled certain configurations with multiple authentication plugins. A remote attacker could possibly use this issue to bypass authentication using incomplete credentials.
- Record
USN-6850-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvpnAlpine:v3.12 |
2.1.0 up to 2.4.12-r0 | 2.4.12-r0 |
openvpnAlpine:v3.13 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.14 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.15 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.16 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.17 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.18 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.19 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.20 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.21 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
Show 63 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openvpnAlpine:v3.22 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.23 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnAlpine:v3.24 |
2.1.0 up to 2.5.6-r0 | 2.5.6-r0 |
openvpnTuxCare:Ubuntu:16.04 |
before 2.3.10-1ubuntu2.2+tuxcare.els1 | 2.3.10-1ubuntu2.2+tuxcare.els1 |
openvpnTuxCare:OracleLinux:6 |
before 2.4.9-1.el6.tuxcare.els1 | 2.4.9-1.el6.tuxcare.els1 |
openvpn-develTuxCare:OracleLinux:6 |
before 2.4.9-1.el6.tuxcare.els1 | 2.4.9-1.el6.tuxcare.els1 |
openvpnTuxCare:CentOS:6 |
before 2.4.9-1.el6.tuxcare.els1 | 2.4.9-1.el6.tuxcare.els1 |
openvpn-develTuxCare:CentOS:6 |
before 2.4.9-1.el6.tuxcare.els1 | 2.4.9-1.el6.tuxcare.els1 |
openvpnTuxCare:Debian:10 |
before 2.4.7-1+deb10u1+tuxcare.els1 | 2.4.7-1+deb10u1+tuxcare.els1 |
openvpnDebian:12 |
before 2.5.6-1 | 2.5.6-1 |
openvpnDebian:13 |
before 2.5.6-1 | 2.5.6-1 |
openvpnDebian:14 |
before 2.5.6-1 | 2.5.6-1 |
openvpnDebian:9 From an advisory covering 4 CVEs |
before 2.4.0-6+deb9u4, plus listed versions 2.4.0-62.4.0-6+deb9u12.4.0-6+deb9u1~bpo8+12.4.0-6+deb9u22.4.0-6+deb9u3 |
2.4.0-6+deb9u4 |
openvpnDebian:11 From an advisory covering 2 CVEs |
before 2.5.1-3+deb11u1, plus listed versions 2.5.1-3 |
2.5.1-3+deb11u1 |
openvpnMageia:8 |
before 2.5.0-2.2.mga8 | 2.5.0-2.2.mga8 |
openvpnopenEuler:20.03-LTS-SP1 |
before 2.4.8-8.oe1 | 2.4.8-8.oe1 |
openvpnopenEuler:20.03-LTS-SP2 |
before 2.4.8-8.oe1 | 2.4.8-8.oe1 |
openvpnopenEuler:20.03-LTS-SP3 |
before 2.4.8-8.oe1 | 2.4.8-8.oe1 |
openvpnopenEuler:22.03-LTS |
before 2.5.5-2.oe2203 | 2.5.5-2.oe2203 |
openvpnSUSE:HPE Helion OpenStack 8 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:OpenStack Cloud 8 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:OpenStack Cloud 9 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:OpenStack Cloud Crowbar 8 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:OpenStack Cloud Crowbar 9 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server for SAP Applications 12 SP3 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server for SAP Applications 12 SP4 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server 12 SP2-BCL |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server 12 SP3-LTSS |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server 12 SP3-BCL |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server 12 SP4-LTSS |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server 12 SP5 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 2.3.8-16.29.1 | 2.3.8-16.29.1 |
openvpnSUSE:Linux Enterprise Module for Basesystem 15 SP3 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise High Performance Computing 15-ESPOS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise High Performance Computing 15-LTSS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Real Time 15 SP2 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server 15-LTSS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server 15 SP1-BCL |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server 15 SP2-BCL |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server for SAP Applications 15 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Manager Proxy 4.1 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Manager Retail Branch Server 4.1 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Manager Server 4.1 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Enterprise Storage 6 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnSUSE:Enterprise Storage 7 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpn-openssl1SUSE:Linux Enterprise Server 11-SECURITY |
before 2.3.2-0.10.12.1 | 2.3.2-0.10.12.1 |
openvpnSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 2.5.6-150400.3.3.1 | 2.5.6-150400.3.3.1 |
openvpnopenSUSE:Leap 15.4 |
before 2.5.6-150400.3.3.1 | 2.5.6-150400.3.3.1 |
openvpnUbuntu:Pro:14.04:LTS |
before 2.3.2-7ubuntu3.2+esm1, plus listed versions 2.3.2-4ubuntu12.3.2-5ubuntu12.3.2-7ubuntu12.3.2-7ubuntu22.3.2-7ubuntu32.3.2-7ubuntu3.12.3.2-7ubuntu3.2 |
2.3.2-7ubuntu3.2+esm1 |
openvpnUbuntu:Pro:16.04:LTS |
before 2.3.10-1ubuntu2.2+esm1, plus listed versions 2.3.7-1ubuntu12.3.7-2ubuntu12.3.8-1ubuntu12.3.10-1ubuntu12.3.10-1ubuntu22.3.10-1ubuntu2.12.3.10-1ubuntu2.2 |
2.3.10-1ubuntu2.2+esm1 |
openvpnUbuntu:18.04:LTS |
before 2.4.4-2ubuntu1.7, plus listed versions 2.4.3-4ubuntu12.4.4-1ubuntu12.4.4-2ubuntu12.4.4-2ubuntu1.12.4.4-2ubuntu1.22.4.4-2ubuntu1.32.4.4-2ubuntu1.52.4.4-2ubuntu1.6 |
2.4.4-2ubuntu1.7 |
openvpnUbuntu:20.04:LTS |
before 2.4.7-1ubuntu2.20.04.4, plus listed versions 2.4.7-1ubuntu22.4.7-1ubuntu2.20.04.22.4.7-1ubuntu2.20.04.3 |
2.4.7-1ubuntu2.20.04.4 |
openvpnUbuntu:22.04:LTS |
before 2.5.5-1ubuntu3, plus listed versions 2.5.1-3ubuntu12.5.1-3ubuntu22.5.1-3ubuntu42.5.1-3ubuntu52.5.5-1ubuntu1 |
2.5.5-1ubuntu3 |
openvpnopenSUSE:Leap 15.3 |
before 2.4.3-150000.5.10.1 | 2.4.3-150000.5.10.1 |
openvpnopenSUSE:Tumbleweed |
before 2.5.6-1.1 | 2.5.6-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-0547 is a critical vulnerability (CVSS 9.8) in Openvpn, published March 18, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.48%, the 89th percentile. Fixed in openvpn 2.4.12-r0.
References
community.openvpn.net/openvpn/wiki/SecurityAnnouncements
openvpn.net/community-downloads
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R36OYC5SJ6FLPVAYJYYT4MOJ2I7MGYFF
lists.debian.org/debian-lts-announce/2022/05/msg00002.html
Show 29 moreShow less
nvd.nist.gov/vuln/detail/CVE-2022-0547
github.com/advisories/GHSA-g28r-w65r-h89m
security.alpinelinux.org/vuln/CVE-2022-0547
errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1649170601
errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761082098.html
security-tracker.debian.org/tracker/CVE-2022-0547
advisories.mageia.org/MGASA-2022-0123.html
bugs.mageia.org/show_bug.cgi?id=30186
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1612
suse.com/support/update/announcement/2022/suse-su-20221024-1
bugzilla.suse.com/1197341
ubuntu.com/security/CVE-2022-0547
cve.org/CVERecord?id=CVE-2022-0547
lists.opensuse.org/archives/list/[email protected]/thread/2QBY77RLVCXQT27JK26OJ53P6OZQP34S