{"id":"CVE-2018-9336","aliases":["ALPINE-CVE-2018-9336","EUVD-2018-20930","GHSA-9p34-3252-9gh9","MGASA-2018-0329","SUSE-SU-2018:1888-1","openSUSE-SU-2024:11128-1"],"status":"published","title":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local...","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00587,"percentile":0.48334,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-415"],"published":"2018-05-01T18:00:00Z","modified":"2026-10-24T14:11:28Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openvpn","fixed_in":["2.4.6-r0"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"openvpn","fixed_in":["2.4.4-1.1.mga6"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"openvpn","fixed_in":["2.4.3-5.3.19"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4.0"},{"fixed":"2.4.6-r0"}]}]},{"source":"osv","ecosystem":"Mageia:6","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-1.1.mga6"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-5.3.19"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.3-1.2"}]}],"bundled":10}],"products":[{"vendor":"openvpn","product":"openvpn"},{"vendor":"slackware","product":"slackware_linux"}],"references":[{"url":"https://github.com/OpenVPN/openvpn/releases/tag/v2.4.6","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory"]},{"url":"http://www.slackware.com/security/viewer.php?l=slackware-security\u0026y=2018\u0026m=slackware-security.568761","tags":["vendor-advisory","x_refsource_SLACKWARE","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.tenable.com/security/research/tra-2018-09","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://github.com/OpenVPN/openvpn/commit/1394192b210cb3c6624a7419bcf3ff966742e79b","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9336"},{"url":"https://github.com/advisories/GHSA-9p34-3252-9gh9"},{"url":"https://security.alpinelinux.org/vuln/CVE-2018-9336","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2018-0329.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23286","tags":["report"]},{"url":"http://lists.suse.com/pipermail/sle-security-updates/2018-July/004246.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20181888-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1090839","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-9336","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3393","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2005-3409","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-1629","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2006-4339","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-12166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7521","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-7522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-11810","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15078","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-9336","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","status":"published","published":"2018-05-01T18:00:00Z","modified":"2024-08-05T07:17:52.1Z","updated_at":"2026-11-02T14:35:02.603326Z"}],"euvd":[{"id":"EUVD-2018-20930","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","status":"published","published":"2018-05-01T18:00:00Z","modified":"2024-08-05T07:17:52Z","updated_at":"2026-11-03T02:40:00.465176Z"}],"ghsa":[{"id":"GHSA-9p34-3252-9gh9","title":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local...","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","status":"published","published":"2022-05-14T03:18:40Z","modified":"2023-02-02T05:07:40Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:52:33.427724Z"}],"nvd":[{"id":"CVE-2018-9336","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","status":"published","published":"2018-05-01T18:29:00.697Z","modified":"2026-06-17T02:06:24.983Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-415"],"updated_at":"2026-11-02T14:04:26.098615Z"}],"osv":[{"id":"ALPINE-CVE-2018-9336","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","status":"published","published":"2018-05-01T18:29:00.697Z","modified":"2026-10-23T17:17:55.311159778Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:27:47.663013Z"},{"id":"CVE-2018-9336","description":"openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.","status":"published","published":"2018-05-01T18:29:00.697Z","modified":"2026-10-24T14:11:28.154450788Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:10.051046Z"},{"id":"MGASA-2018-0329","title":"Updated openvpn packages fix security vulnerability","description":"Updated openvpn packages fix security vulnerability:\n\nFix potential double-free() in Interactive Service could lead to denial\nof service (CVE-2018-9336).\n","status":"published","published":"2018-08-10T14:37:39Z","modified":"2026-04-16T06:22:56.446166052Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"openSUSE-SU-2024:11128-1","title":"openvpn-2.5.3-1.2 on GA media","description":"These are all security issues fixed in the openvpn-2.5.3-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:53:06.953443Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"SUSE-SU-2018:1888-1","title":"Security update for openvpn","description":"This update for openvpn fixes the following issues:\n\n- CVE-2018-9336: Fix potential double-free() in Interactive Service could lead to denial of service (bsc#1090839).\n","status":"published","published":"2018-07-05T06:47:58Z","modified":"2026-02-04T04:08:18.178886Z","updated_at":"2026-11-02T15:53:44.972817Z"}]}}