CVE Browser

A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via craf…

openvpn: OpenVPN: Remote Denial of Service via crafted ACK packets

OpenVPN: OpenVPN: Arbitrary command execution via crafted certificate subject

OpenVPN: OpenVPN: Arbitrary Code Execution via Binary Planting on Windows

openvpn: OpenVPN: Denial of service via NULL DACL on named IPC objects

OpenVPN: OpenVPN: Security Bypass via incorrect file path validation

openvpn: OpenVPN: Out-of-bounds write via crafted DOMAIN-SEARCH entries

OpenVPN: OpenVPN: Memory corruption and information disclosure vulnerability

OpenVPN: OpenVPN: Privilege Escalation via Arbitrary Configuration File Loading

openvpn: mbedtls: OpenVPN: User misidentification via ignored X.509 identity field

openvpn: OpenVPN: Privilege escalation via arbitrary configuration file loading

openvpn: OpenVPN: Denial of Service due to memory leak in tls-crypt-v2 client key extraction

OpenVPN: OpenVPN: Denial of Service or memory leak via crafted packets

openvpn: OpenVPN: Denial of Service via crafted NTLM proxy response

OpenVPN: OpenVPN: Denial of service or memory leakage via incomplete TLS guard

OpenVPN: OpenVPN: Remote attackers can cause DNS state pollution or service crash via crafted search domain.

OpenVPN Access Server: OpenVPN Access Server: HTTP request smuggling via bare line-feed sequences in HTTP headers

openvpn: From CVEorg collector

openvpn: From CVEorg collector

An incorrect buffer size calculation in the epoch key generator in OpenVPN ovpn-dco-win version 2.0.0 through 2.8.3 allows a remote authenticated peer to trigg…

openvpn: OpenVPN: Server crash or memory leak due to race condition and use-after-free

Improper validation of packet length during tls-crypt-v2 key extraction in OpenVPN 2.6.0 through 2.6.19 and 2.7_alpha1 through 2.7.1 allows authenticated attac…

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privil…

Buffer overflow in ovpn‑dco‑win version 2.8.0 allows local attackers to cause a system crash by sending too large packets to the remote peer when the AEAD tag…

Insufficient epoch key slot processing in OpenVPN 2.7_alpha1 through 2.7_rc5 allows remote authenticated users to trigger an assert resulting in a denial of se…