OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openvpn | Jul 30, 2024 | Apr 6, 2006 |
| Freebsd | — | Upgrade openvpn | Dec 10, 2025 | Apr 5, 2006 |
| Suse | — | Upgrade openvpnUpgrade openvpn-develUpgrade openvpn-down-root-pluginUpgrade openvpn-auth-pam-plugin | Sep 1, 2026 | Jun 28, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub