CVE-2020-7224 - The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load

Back Back to CVE browser

CRITICAL

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load

Published Apr 16, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.31%

Description

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://docs.aviatrix.com/#security-bulletin
x_refsource_MISCVendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html
x_refsource_MISCVendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28353
Advisory

Link	Providers	Tags
https://docs.aviatrix.com/#security-bulletin		x_refsource_MISCVendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html		x_refsource_MISCVendor Advisory
https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-28353		Advisory