Openvpn Access Server vulnerabilities

• openvpn access server OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header... CVE-2025-3110 6.9 MediumJuly 8, 2026
• openvpn, debian linux, fedoraproject fedora +2 more +4 more Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory... CVE-2023-46850 Fix available 9.8 CriticalNovember 11, 2023
• openvpn, debian linux, fedoraproject fedora +2 more +4 more Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows... CVE-2023-46849 Fix available 7.5 HighNovember 11, 2023
• openvpn access server OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a... CVE-2021-4234 7.5 HighJuly 6, 2022
• openvpn access server OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token... CVE-2022-33738 7.5 HighJuly 6, 2022
• openvpn access server The OpenVPN Access Server installer creates a log file readable for everyone, which from version... CVE-2022-33737 7.5 HighJuly 6, 2022
• openvpn access server OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script... CVE-2021-3824 6.1 MediumSeptember 23, 2021
• openvpn access server OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user... CVE-2020-36382 7.5 HighJune 4, 2021
• openvpn access server OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass... CVE-2020-15077 5.3 MediumJune 4, 2021
• openvpn access server OpenVPN Access Server older than version 2.8.4 generates new user authentication tokens instead... CVE-2020-15074 7.5 HighJuly 14, 2020
• openvpn access server An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the... CVE-2020-11462 7.5 HighMay 4, 2020
• openvpn access server OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is... CVE-2020-8953 9.8 CriticalFebruary 13, 2020
• openvpn access server CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote... CVE-2017-5868 6.1 MediumMay 25, 2017
• openvpn, canonical ubuntu linux, debian linux +3 more +5 more OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote... CVE-2014-8104 Fix available 6.8 MediumDecember 1, 2014
• openvpn access server Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop... CVE-2014-9104 6.8 MediumNovember 26, 2014
• openvpn access server Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access... CVE-2013-2692 6.8 MediumMay 13, 2014
• openvpn, opensuse, openvpn access server +2 more The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode,... CVE-2013-2061 Fix available 2.6 LowNovember 15, 2013
• openvpn, openvpn access server +1 more OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not... CVE-2006-2229 4.0 MediumMay 5, 2006
• openvpn, openvpn access server +1 more OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client... CVE-2006-1629 Fix available 9.0 HighApril 6, 2006
• openvpn, openvpn access server +1 more OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of... CVE-2005-3409 Fix available 5.0 MediumNovember 2, 2005
• openvpn, openvpn access server +1 more Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows... CVE-2005-3393 Fix available 7.5 HighNovember 1, 2005