Download
| Alert*
oval:org.secpod.oval:def:41168
The host is installed with OpenVPN less than 2.3.17 or 2.4.x before 2.4.3 and is prone to denial of service vulnerability. A flaw is present in the application, which fails to properly handle a certificate with an embedded NULL character. Successful exploitation could allow attackers to cause denial ... oval:org.secpod.oval:def:112507 OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for compres ... oval:org.secpod.oval:def:2000050 OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character. oval:org.secpod.oval:def:1600724 OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet. OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL charac ... oval:org.secpod.oval:def:112495 OpenVPN is a robust and highly flexible tunneling application that uses all of the encryption, authentication, and certification features of the OpenSSL library to securely tunnel IP networks over a single UDP or TCP port. It can use the Marcus Franz Xaver Johannes Oberhumers LZO library for compres ... |