{"id":"CVE-2022-0547","aliases":["ALPINE-CVE-2022-0547","CLSA-2022-1649170601","CLSA-2022-1649170882","CLSA-2022-1649171018","CLSA-2025-1761082098","DEBIAN-CVE-2022-0547","DLA-2992-1","DLA-4079-1","EUVD-2022-15669","GHSA-g28r-w65r-h89m","MGASA-2022-0123","OESA-2022-1612","SUSE-SU-2022:1024-1","SUSE-SU-2022:1029-1","SUSE-SU-2022:14937-1","SUSE-SU-2022:1934-1","UBUNTU-CVE-2022-0547","USN-5347-1","USN-6850-1","openSUSE-SU-2022:1029-1","openSUSE-SU-2024:11968-1"],"status":"published","title":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03478,"percentile":0.89186,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-287","CWE-305"],"published":"2022-03-18T18:00:20Z","modified":"2026-11-03T08:00:04Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"openvpn","fixed_in":["2.4.12-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"openvpn","fixed_in":["2.5.6-r0"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"openvpn","fixed_in":["2.3.10-1ubuntu2.2+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openvpn","fixed_in":["2.4.9-1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openvpn-devel","fixed_in":["2.4.9-1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openvpn","fixed_in":["2.4.9-1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openvpn-devel","fixed_in":["2.4.9-1.el6.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Debian:10","package":"openvpn","fixed_in":["2.4.7-1+deb10u1+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"openvpn","fixed_in":["2.5.6-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openvpn","fixed_in":["2.5.6-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openvpn","fixed_in":["2.5.6-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"openvpn","fixed_in":["2.5.0-2.2.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openvpn","fixed_in":["2.4.8-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP2","package":"openvpn","fixed_in":["2.4.8-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openvpn","fixed_in":["2.4.8-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"openvpn","fixed_in":["2.5.5-2.oe2203"],"sources":["osv"]},{"ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 8","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud 9","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvpn","fixed_in":["2.3.8-16.29.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Proxy 4.1","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Manager Server 4.1","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openvpn-openssl1","fixed_in":["2.3.2-0.10.12.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openvpn","fixed_in":["2.5.6-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"openvpn","fixed_in":["2.5.6-150400.3.3.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openvpn","fixed_in":["2.3.2-7ubuntu3.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvpn","fixed_in":["2.3.10-1ubuntu2.2+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"openvpn","fixed_in":["2.4.4-2ubuntu1.7"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openvpn","fixed_in":["2.4.7-1ubuntu2.20.04.4"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openvpn","fixed_in":["2.5.5-1ubuntu3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"openvpn","fixed_in":["2.4.3-150000.5.10.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"openvpn","fixed_in":["2.5.6-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.4.12-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.1.0"},{"fixed":"2.5.6-r0"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10-1ubuntu2.2+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openvpn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openvpn-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.9-1.el6.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Debian:10","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1+deb10u1+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.0-6+deb9u4"}]}],"versions":["2.4.0-6","2.4.0-6+deb9u1","2.4.0-6+deb9u1~bpo8+1","2.4.0-6+deb9u2","2.4.0-6+deb9u3"],"bundled":4},{"source":"osv","ecosystem":"Debian:11","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-3+deb11u1"}]}],"versions":["2.5.1-3"],"bundled":2},{"source":"osv","ecosystem":"Mageia:8","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-2.2.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP2","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.8-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-2.oe2203"}]}]},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.8-16.29.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11-SECURITY","package":"openvpn-openssl1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-0.10.12.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-150400.3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-7ubuntu3.2+esm1"}]}],"versions":["2.3.2-4ubuntu1","2.3.2-5ubuntu1","2.3.2-7ubuntu1","2.3.2-7ubuntu2","2.3.2-7ubuntu3","2.3.2-7ubuntu3.1","2.3.2-7ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10-1ubuntu2.2+esm1"}]}],"versions":["2.3.7-1ubuntu1","2.3.7-2ubuntu1","2.3.8-1ubuntu1","2.3.10-1ubuntu1","2.3.10-1ubuntu2","2.3.10-1ubuntu2.1","2.3.10-1ubuntu2.2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-2ubuntu1.7"}]}],"versions":["2.4.3-4ubuntu1","2.4.4-1ubuntu1","2.4.4-2ubuntu1","2.4.4-2ubuntu1.1","2.4.4-2ubuntu1.2","2.4.4-2ubuntu1.3","2.4.4-2ubuntu1.5","2.4.4-2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu2.20.04.4"}]}],"versions":["2.4.7-1ubuntu2","2.4.7-1ubuntu2.20.04.2","2.4.7-1ubuntu2.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.5-1ubuntu3"}]}],"versions":["2.5.1-3ubuntu1","2.5.1-3ubuntu2","2.5.1-3ubuntu4","2.5.1-3ubuntu5","2.5.5-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.4-2ubuntu1.7"}]}],"versions":["2.4.3-4ubuntu1","2.4.4-1ubuntu1","2.4.4-2ubuntu1","2.4.4-2ubuntu1.1","2.4.4-2ubuntu1.2","2.4.4-2ubuntu1.3","2.4.4-2ubuntu1.5","2.4.4-2ubuntu1.6"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.7-1ubuntu2.20.04.4"}]}],"versions":["2.4.7-1ubuntu2","2.4.7-1ubuntu2.20.04.2","2.4.7-1ubuntu2.20.04.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.2-7ubuntu3.2+esm1"}]}],"versions":["2.3.2-4ubuntu1","2.3.2-5ubuntu1","2.3.2-7ubuntu1","2.3.2-7ubuntu2","2.3.2-7ubuntu3","2.3.2-7ubuntu3.1","2.3.2-7ubuntu3.2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.10-1ubuntu2.2+esm1"}]}],"versions":["2.3.7-1ubuntu1","2.3.7-2ubuntu1","2.3.8-1ubuntu1","2.3.10-1ubuntu1","2.3.10-1ubuntu2","2.3.10-1ubuntu2.1","2.3.10-1ubuntu2.2"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.3-150000.5.10.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"openvpn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.6-1.1"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"openvpn","product":"openvpn"}],"references":[{"url":"https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web","report"]},{"url":"https://community.openvpn.net/openvpn/wiki/CVE-2022-0547","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","web","advisory","report"]},{"url":"https://openvpn.net/community-downloads/","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R36OYC5SJ6FLPVAYJYYT4MOJ2I7MGYFF/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJ35WKPME4HYNQCQNAJHLCZOJL2SAE/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://lists.debian.org/debian-lts-announce/2025/03/msg00005.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0547","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJ35WKPME4HYNQCQNAJHLCZOJL2SAE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R36OYC5SJ6FLPVAYJYYT4MOJ2I7MGYFF"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GFXJ35WKPME4HYNQCQNAJHLCZOJL2SAE"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R36OYC5SJ6FLPVAYJYYT4MOJ2I7MGYFF"},{"url":"https://openvpn.net/community-downloads"},{"url":"https://github.com/advisories/GHSA-g28r-w65r-h89m"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-0547","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04/CLSA-2022-1649170601","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2022-1649170882.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2022-1649171018.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2025-1761082098.html","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0547.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0547","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2022-0123.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30186","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/SPPNX2WVJ47VJUXDLHQ2RAW77YRH6WIP/","tags":["web"]},{"url":"https://github.com/OpenVPN/openvpn/blob/release/2.5/Changes.rst","tags":["web"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2022-1612","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221024-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1197341","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0547","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221029-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-202214937-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221934-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1123557","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-0547","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5347-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0547","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6850-1","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2QBY77RLVCXQT27JK26OJ53P6OZQP34S/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-0547","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:00:20Z","modified":"2025-11-03T20:34:30.191Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15669","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:00:20Z","modified":"2025-11-03T20:34:30Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:32.503916Z"}],"ghsa":[{"id":"GHSA-g28r-w65r-h89m","title":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-19T00:00:57Z","modified":"2025-11-03T21:31:41Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287","CWE-305"],"updated_at":"2026-11-02T15:04:19.274788Z"}],"nvd":[{"id":"CVE-2022-0547","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:15:12.017Z","modified":"2026-06-17T04:20:49.077Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-305","CWE-287"],"updated_at":"2026-11-02T14:07:14.24948Z"}],"osv":[{"id":"ALPINE-CVE-2022-0547","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:15:12.017Z","modified":"2026-11-03T07:18:32.998685262Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"CVE-2022-0547","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:00:20Z","modified":"2026-10-28T02:31:01.144048242Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DEBIAN-CVE-2022-0547","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:15:12.017Z","modified":"2026-11-03T08:00:04.737952619Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:25:15.646766Z"},{"id":"OESA-2022-1612","title":"openvpn security update","description":"OpenVPN can be extended through the --plugin option, which provides possibilities to add specialized authentication, user accounting, packet filtering and related features. These plug-ins need to be written in C and provides a more low-level and information rich access to similar features as the various script-hooks.\r\n\r\nSecurity Fix(es):\r\n\r\nOpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.(CVE-2022-0547)","status":"published","published":"2022-04-12T11:04:53Z","modified":"2026-08-18T01:16:28.524544347Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:39.528805Z"},{"id":"UBUNTU-CVE-2022-0547","description":"OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.","status":"published","published":"2022-03-18T18:15:00Z","modified":"2026-02-04T02:33:54.751897Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"CLSA-2022-1649170601","title":"Fix CVE(s): CVE-2022-0547","description":"\n   * SECURITY UPDATE: authentication bypass via multiple deferred\n     authentication plug-ins\n     - debian/patches/CVE-2022-0547.patch: disallow multiple deferred\n       authentication plug-ins in doc/openvpn.8, src/openvpn/plugin.c.\n     - CVE-2022-0547","status":"published","published":"2022-04-05T14:56:41Z","modified":"2026-06-04T10:04:18.936702Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1649170882","title":"Fixed CVE-2022-0547 in openvpn","description":"- CVE-2022-0547: Fix authentication bypass via multiple deferred authentication plug-ins","status":"published","published":"2022-04-05T15:01:22Z","modified":"2026-06-01T00:33:24.286948332Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2022-1649171018","title":"Fix of CVE: CVE-2022-0547","description":"- CVE-2022-0547: Fix authentication bypass via multiple deferred authentication plug-ins","status":"published","published":"2022-04-05T15:03:38Z","modified":"2026-06-01T00:33:15.3923953Z","updated_at":"2026-11-02T15:43:39.801198Z"},{"id":"CLSA-2025-1761082098","title":"Fix CVE(s): CVE-2022-0547","description":"   * SECURITY UPDATE: Authentication bypass in external authentication\n     plug-ins with only partially correct credentials\n     - debian/patches/CVE-2022-0547.patch: disallow multiple deferred\n       authentication plug-ins\n     - CVE-2022-0547\n   * Update sample keys for testing\n     - debian/sample-keys/*\n     - debian/rules\n     - debian/source/include-binaries","status":"published","published":"2025-10-21T21:28:25Z","modified":"2026-06-04T10:03:30.473805Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-2992-1","title":"openvpn - security update","status":"published","published":"2022-05-03T00:00:00Z","modified":"2026-03-09T01:20:24.861872Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-4079-1","title":"openvpn - security update","status":"published","published":"2025-03-08T00:00:00Z","modified":"2026-03-09T01:17:55.178456Z","updated_at":"2026-11-02T15:46:12.7027Z"},{"id":"MGASA-2022-0123","title":"Updated openvpn packages fix security vulnerability","description":"Potential authentication by-pass with multiple deferred authentication\nplug-ins. (CVE-2022-0547)\n","status":"published","published":"2022-03-30T17:06:56Z","modified":"2026-04-16T04:41:42.505658548Z","updated_at":"2026-11-02T15:49:41.849028Z"},{"id":"openSUSE-SU-2022:1029-1","title":"Security update for openvpn","description":"This update for openvpn fixes the following issues:\n\n- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).\n","status":"published","published":"2022-03-29T15:29:29Z","modified":"2026-02-04T02:38:07.074309Z","updated_at":"2026-11-02T16:58:32.653274Z"},{"id":"openSUSE-SU-2024:11968-1","title":"openvpn-2.5.6-1.1 on GA media","description":"These are all security issues fixed in the openvpn-2.5.6-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:13:58.829858Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1024-1","title":"Security update for openvpn","description":"This update for openvpn fixes the following issues:\n\n- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).\n","status":"published","published":"2022-03-29T13:36:00Z","modified":"2026-02-04T03:17:26.046195Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:1029-1","title":"Security update for openvpn","description":"This update for openvpn fixes the following issues:\n\n- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).\n","status":"published","published":"2022-03-29T15:30:40Z","modified":"2026-02-04T02:14:12.455543Z","updated_at":"2026-11-02T15:53:50.066806Z"},{"id":"SUSE-SU-2022:14937-1","title":"Security update for openvpn-openssl1","description":"This update for openvpn-openssl1 fixes the following issues:\n\n- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).\n","status":"published","published":"2022-04-06T07:27:38Z","modified":"2026-02-04T03:13:44.605523Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1934-1","title":"Security update for openvpn","description":"This update for openvpn fixes the following issues:\n\n- CVE-2022-0547: Fixed possible authentication bypass in external authentication plug-in (bsc#1197341).\n\n- By default the --suppress-timestamps flag is not needed (bsc#1123557).\n","status":"published","published":"2022-06-03T12:58:01Z","modified":"2026-02-04T02:26:13.161267Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"USN-5347-1","title":"openvpn vulnerability","description":"It was discovered that OpenVPN incorrectly handled certain configurations\nwith multiple authentication plugins. A remote attacker could possibly use\nthis issue to bypass authentication using incomplete credentials.\n","status":"published","published":"2022-03-24T12:13:58Z","modified":"2026-02-10T04:42:32Z","updated_at":"2026-11-02T16:58:15.683829Z"},{"id":"USN-6850-1","title":"openvpn vulnerability","description":"It was discovered that OpenVPN incorrectly handled certain configurations\nwith multiple authentication plugins. A remote attacker could possibly use\nthis issue to bypass authentication using incomplete credentials.\n","status":"published","published":"2024-06-26T01:06:38Z","modified":"2026-06-29T13:51:10.877700305Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}