Skip to contentOpenvpn vulnerabilities
Newest
- openvpn 3 core library, 3 +1 moreThe PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the...CVE-2023-62476.5 Medium
- openvpn connectThe nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not...CVE-2023-72457.8 High
- openvpn connectOpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external...CVE-2023-72247.8 High
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUse after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory...CVE-2023-46850Fix available9.8 Critical
- openvpn, debian linux, fedoraproject fedora +2 more +4 moreUsing the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows...CVE-2023-46849Fix available7.5 High
- openvpn connectOpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows...CVE-2022-37615.9 Medium
- openvpnControl Channel in OpenVPN 2.4.7 and earlier allows remote attackers to cause a denial of service...CVE-2020-208137.5 High
- openvpn access serverOpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a...CVE-2021-42347.5 High
- openvpn access serverOpenVPN Access Server before 2.11 uses a weak random generator used to create user session token...CVE-2022-337387.5 High
- openvpn access serverThe OpenVPN Access Server installer creates a log file readable for everyone, which from version...CVE-2022-337377.5 High
- openvpn, debian linux, fedoraproject fedora +2 moreOpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication...CVE-2022-0547Fix available9.8 Critical
- openvpn access serverOpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script...CVE-2021-38246.1 Medium
- openvpn, openvpn 3 core library +1 moreOpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the...CVE-2021-35477.4 High
- openvpn connectOpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable...CVE-2021-36137.8 High
- openvpn, openvpn openvpn-gui +1 moreOpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable...CVE-2021-36067.8 High
- openvpn access serverOpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user...CVE-2020-363827.5 High
- openvpn access serverOpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass...CVE-2020-150775.3 Medium
- openvpn private tunnelPrivate Tunnel installer for macOS version 3.0.1 and older versions may corrupt system critical...CVE-2020-150767.8 High
- openvpn, canonical ubuntu linux, debian linux +1 more +3 moreOpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access...CVE-2020-15078Fix available7.5 High
- openvpn connectOpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it...CVE-2020-150757.1 High
- openvpn access serverOpenVPN Access Server older than version 2.8.4 generates new user authentication tokens instead...CVE-2020-150747.5 High
- openvpn access serverAn issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3. With the...CVE-2020-114627.5 High
- openvpn, debian linux, fedoraproject fedora +2 moreAn issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 ...CVE-2020-11810Fix available3.7 Low
- openvpn connectOpenVPN Connect 3.1.0.361 on Windows has Insecure Permissions for %PROGRAMDATA%\OpenVPN Connect...CVE-2020-9442Public exploit7.8 High
- openvpn access serverOpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is...CVE-2020-89539.8 Critical
- openvpn, slackware linux +1 moreopenvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local...CVE-2018-9336Fix available7.8 High
- openvpn** DISPUTED ** A cross-protocol scripting issue was discovered in the management interface in...CVE-2018-7544Fix availableDisputed9.1 Critical
- openvpn, debian linux +1 moreOpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow...CVE-2017-12166Fix available9.8 Critical
- openvpnOpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by...CVE-2017-7522Fix available6.5 Medium
- openvpnOpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to...CVE-2017-7521Fix available5.9 Medium
- openvpnOpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or...CVE-2017-7520Fix available7.4 High
- openvpnOpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when...CVE-2017-7508Fix available7.5 High
- openvpn access serverCRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote...CVE-2017-58686.1 Medium
- openvpnOpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via...CVE-2017-7478Public exploitFix availableEPSS 13.8%7.5 High
- openvpnOpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet...CVE-2017-7479Fix available6.5 Medium
- openvpnOpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain...CVE-2016-6329Fix available5.9 Medium
- openvpn, canonical ubuntu linux, debian linux +3 more +5 moreOpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote...CVE-2014-8104Fix available6.8 Medium
- openvpn access serverMultiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop...CVE-2014-91046.8 Medium
- openvpn, privatetunnel +1 moreUnquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel...CVE-2014-5455Public exploit6.9 Medium
- openvpn access serverCross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access...CVE-2013-26926.8 Medium
- openvpn, opensuse, openvpn access server +2 moreThe openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode,...CVE-2013-2061Fix available2.6 Low
- openvpnUnspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows...CVE-2008-3459Fix available7.6 High
- openvpn, openvpn access server +1 moreOpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not...CVE-2006-22294.0 Medium
- openvpn, openvpn access server +1 moreOpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client...CVE-2006-1629Fix available9.0 High
- openvpn, openvpn access server +1 moreOpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of...CVE-2005-3409Fix available5.0 Medium
- openvpn, openvpn access server +1 moreFormat string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows...CVE-2005-3393Fix available7.5 High
- openvpnRace condition in OpenVPN before 2.0.1, when --duplicate-cn is not enabled, allows remote...CVE-2005-2534Fix available2.6 Low
- openvpnOpenVPN before 2.0.1, when running in "dev tap" Ethernet bridging mode, allows remote...CVE-2005-2533Fix available2.1 Low
- openvpnOpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be...CVE-2005-2532Fix available5.0 Medium
- openvpnOpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not...CVE-2005-2531Fix available5.0 Medium