Browse CVEs

MEDIUM 6.5 CVE-2017-7479 OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Serv… Openvpn after 2.3.14 Fix from $1,6002017-05-15 MEDIUM 5.9 CVE-2016-6329EPSS 6% OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duratio… Openvpn after 2.3.14 Fix from $1,6002017-01-31 MEDIUM 6.8 CVE-2014-9104 Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop Client in OpenVPN Access Server 1.5.6 and earlier allow … Openvpn Access Server after 1.5.6 Fix from $1,6002014-11-26 MEDIUM 5.3 CVE-2014-5455 Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Win… Openvpn Patch available Fix from $1,6002014-08-25 MEDIUM 6.8 CVE-2013-2692 Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack th… Openvpn Access Server after 1.8.4 Fix from $1,6002014-05-13 HIGH 7.6 CVE-2008-3459 Unspecified vulnerability in OpenVPN 2.1-beta14 through 2.1-rc8, when running on non-Windows systems, allows remote servers to execute arbitrary comm… Openvpn Mitigation only Fix from $1,9502008-08-04 HIGH 9.0 CVE-2006-1629 OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment var… Openvpn Patch available Fix from $1,9502006-04-06 MEDIUM 5.0 CVE-2005-3409 OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept f… Openvpn Patch available Fix from $1,6002005-11-02 HIGH 7.5 CVE-2005-3393 Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format … Openvpn Patch available Fix from $1,9502005-11-01 MEDIUM 5.0 CVE-2005-2531 OpenVPN before 2.0.1, when running with "verb 0" and without TLS authentication, does not properly flush the OpenSSL error queue when a client fails … Openvpn Patch available Fix from $1,6002005-08-24 MEDIUM 5.0 CVE-2005-2532 OpenVPN before 2.0.1 does not properly flush the OpenSSL error queue when a packet can not be decrypted by the server, which allows remote authentica… Openvpn Patch available Fix from $1,6002005-08-24