USN-6484-1
openvpn vulnerabilities
It was discovered that OpenVPN incorrectly handled the --fragment option in certain configurations. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2023-46849)
It was discovered that OpenVPN incorrectly handled certain memory operations. A remote attacker could use this issue to cause OpenVPN to crash, obtain sensitive information, or possibly execute arbitrary code. (CVE-2023-46850)
What each source reports
OSV No score
openvpn vulnerabilities
It was discovered that OpenVPN incorrectly handled the --fragment option in certain configurations. A remote attacker could possibly use this issue to cause OpenVPN to crash, resulting in a denial of service. (CVE-2023-46849)
It was discovered that OpenVPN incorrectly handled certain memory operations. A remote attacker could use this issue to cause OpenVPN to crash, obtain sensitive information, or possibly execute arbitrary code. (CVE-2023-46850)
- Record
USN-6484-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openvpnUbuntu:23.10 |
before 2.6.5-0ubuntu1.1, plus listed versions 2.6.1-1ubuntu12.6.3-1ubuntu12.6.3-2ubuntu12.6.5-0ubuntu1 |
2.6.5-0ubuntu1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6484-1 is a vulnerability with no CVSS score yet in openvpn, published November 16, 2023. No source lists public exploit code. Fixed in openvpn 2.6.5-0ubuntu1.1.