Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openvpn | Aug 22, 2024 | Nov 11, 2023 |
| Debian | — | Upgrade openvpn | Nov 20, 2023 | Nov 11, 2023 |
| Freebsd | — | Upgrade openvpnUpgrade openvpn-devel | Nov 16, 2023 | Nov 15, 2023 |
| Gentoo Linux | — | Upgrade net-vpn/openvpn. | Sep 23, 2024 | Nov 11, 2023 |
| Ubuntu | — | Upgrade openvpn | Nov 17, 2023 | Nov 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub