Every CVE Search/ Get API key

OSV-2022-1276

Stack-buffer-overflow in ntlm_phase_3

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
ntlm_phase_3
establish_http_proxy_passthru
fuzz_proxy.c

What each source reports

OSV No score

Stack-buffer-overflow in ntlm_phase_3

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59818

Crash type: Stack-buffer-overflow WRITE 1
Crash state:
ntlm_phase_3
establish_http_proxy_passthru
fuzz_proxy.c
Record
OSV-2022-1276
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
openvpn
OSS-Fuzz
Listed versions, plus commit ranges
v2.6.0v2.6.1v2.6.10v2.6.11v2.6.12
Show 26 moreShow less
v2.6.13v2.6.14v2.6.2v2.6.3v2.6.4v2.6.5v2.6.6v2.6.7v2.6.8v2.6.9v2.6_beta1v2.6_beta2v2.6_branchedv2.6_rc1v2.6_rc2v2.7_alpha1v2.7_alpha2v2.6.23v2.6.22v2.6.21v2.6.20v2.6.19v2.6.18v2.6.17v2.6.16v2.6.15
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-1276 is a vulnerability with no CVSS score yet in openvpn, published June 15, 2023. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open