OA
Product
Openvpn Access Server
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 3Low 0
Watch
Add Openvpn Access Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46850 | 9.8 | Nov 11 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer Affected: 2.11.0 through 2.11.3; 2.12.0 before 2.12.2 |
| CVE-2020-8953 | 9.8 | Feb 13 | OpenVPN Access Server 2.8.x before 2.8.1 allows LDAP authentication bypass (except when a user is enrolled in two-factor authentication) Affected: 2.8.0 before 2.8.1 |
| CVE-2025-3110 | 7.5 | Jul 8 | OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed… Affected: 2.7.2 through 3.1.0 |
| CVE-2023-46849 | 7.5 | Nov 11 | Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an… Affected: 2.11.0 through 2.11.3; 2.12.0; 2.12.1 |
| CVE-2021-4234 | 7.5 | Jul 6 | OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not… Affected: before 2.11.0 |
| CVE-2022-33738 | 7.5 | Jul 6 | OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal Affected: before 2.11.0 |
| CVE-2022-33737 | 7.5 | Jul 6 | The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password Affected: 2.10.0 before 2.11.0 |
| CVE-2020-36382 | 7.5 | Jun 4 | OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of… Affected: 2.7.3 through 2.8.7 |
| CVE-2020-15074 | 7.5 | Jul 14 | OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to… Affected: before 2.8.4; 2.9.0 before 2.9.6 |
| CVE-2020-11462 | 7.5 | May 4 | An issue was discovered in OpenVPN Access Server before 2.7.0 and 2.8.x before 2.8.3 Affected: before 2.7.0; 2.8.0 through 2.8.3 |
| CVE-2021-3824 | 6.1 | Sep 23 | OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL Affected: 2.9.0 through 2.9.4 |
| CVE-2017-5868 | 6.1 | May 26 | CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation… Affected: 2.1.4 |
| CVE-2020-15077 | 5.3 | Jun 4 | OpenVPN Access Server 2.8.7 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred… Affected: through 2.8.7 |
| CVE-2014-8104 | – | Dec 3 | OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control… Affected: 2.0.0; 2.0.1; 2.0.2; 2.0.3; 2.0.5; 2.0.6; +3 more |
| CVE-2014-9104 | – | Nov 26 | Multiple cross-site request forgery (CSRF) vulnerabilities in the XML-RPC API in the Desktop Client in OpenVPN Access Server 1.5.6 and earlier allow remote attackers to hijack the… Affected: through 1.5.6 |
| CVE-2013-2692 | – | May 13 | Cross-site request forgery (CSRF) vulnerability in the Admin web interface in OpenVPN Access Server before 1.8.5 allows remote attackers to hijack the authentication of… Affected: through 1.8.4 |
| CVE-2013-2061 | – | Nov 18 | The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack… Affected: 2.0.0 |
| CVE-2006-2229 | – | May 5 | OpenVPN 2.0.7 and earlier, when configured to use the --management option with an IP that is not 127.0.0.1, uses a cleartext password for TCP sessions to the management interface,… Affected: 2.0.1; 2.0.2; 2.0.5; 2.0.6; 2.0.7 |
| CVE-2006-1629 | – | Apr 6 | OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable Affected: 2.0.1; 2.0.2; 2.0.3; 2.0.5 |
| CVE-2005-3409 | – | Nov 2 | OpenVPN 2.x before 2.0.4, when running in TCP mode, allows remote attackers to cause a denial of service (segmentation fault) by forcing the accept function call to return an… Affected: 2.0.1; 2.0.2 |
| CVE-2005-3393 | – | Nov 1 | Format string vulnerability in the foreign_option function in options.c for OpenVPN 2.0.x allows remote clients to execute arbitrary code via format string specifiers in a push of… Affected: 2.0.1; 2.0.2 |
Showing 21