openvpn vulnerabilities (SUSE)
28 vulnerabilities.
-
openvpnSUSE Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated... 8.7 High -
openvpnSUSE OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be... 2.0 Low -
openvpnSUSE The Windows interactive service in OpenVPN 2.7_alpha1 through 2.7.4 allows remote attackers to... 5.1 Medium -
openvpnSUSE OpenVPN version 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers to... 5.9 Medium -
openvpnSUSE A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1... 6.0 Medium -
openvpnSUSE An incomplete guard in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... 6.0 Medium -
openvpnSUSE A use-after-free in OpenVPN 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote... 6.0 Medium -
openvpnSUSE A memory leak in the tls-crypt-v2 client key extraction in OpenVPN 2.5.0 through 2.6.20 and 2... 7.1 High -
openvpnSUSE OpenVPN version 2.1.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows attackers via an off-by... 7.0 High -
openvpnSUSE A race condition in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows remote... 6.1 Medium -
openvpnSUSE Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through... 6.9 Medium -
openvpnSUSE Improper validation of source IP addresses in OpenVPN version 2.6.0 through 2.7_rc1 allows an... 4.6 Medium -
openvpnSUSE OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to... 7.5 High -
openvpnSUSE OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which attackers can use to... 9.1 Critical -
openvpnSUSE OpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from... 4.3 Medium -
openvpnSUSE OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication... 9.8 Critical -
openvpnSUSE OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access... 7.5 High -
openvpnSUSE Security update for openvpn No score -
openvpnSUSE An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ... 3.7 Low -
openvpnSUSE openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local... 7.8 High -
openvpnSUSE ** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in... 9.1 Critical -
openvpnSUSE OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow... 9.8 Critical -
openvpnSUSE OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to... 5.9 Medium -
openvpnSUSE OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or... 7.4 High -
openvpnSUSE OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when... 7.5 High -
openvpnSUSE OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via... 7.5 High -
openvpnSUSE OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet... 6.5 Medium -
openvpnSUSE OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain... 5.9 Medium