Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntuUbuntuUSN-2368-1
HistoryOct 02, 2014 - 12:00 a.m.

OpenVPN vulnerability

2014-10-0200:00:00
ubuntu.com
51

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON

Releases

  • Ubuntu 12.04

Packages

  • openvpn - virtual private network software

Details

It was discovered that OpenVPN incorrectly handled HMAC comparisons when
running in UDP mode. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could possibly be used to perform a
plaintext recovery attack.

OSVersionArchitecturePackageVersionFilename
Ubuntu12.04noarchopenvpn< 2.2.1-8ubuntu1.3UNKNOWN

Related

nessus 11
openvas 8
ubuntucve 1
securityvulns 2
nvd 1
kaspersky 1
fedora 2
amazon 1
cvelist 1
cve 1
debiancve 1
prion 1
freebsd 1
gentoo 1
nessus
nessus
SuSE 11.3 Security Update : openvpn (SAT Patch Number 8493)
2013-11-29 00:00:00
OpenVPN < 2.3.1 Information Disclosure Vulnerability (Windows)
2019-05-17 00:00:00
Ubuntu 12.04 LTS : openvpn vulnerability (USN-2368-1)
2014-10-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-2368-1)
2014-10-03 00:00:00
Fedora Update for openvpn FEDORA-2013-7531
2013-05-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2013:1783-1)
2021-06-09 00:00:00
ubuntucve
ubuntucve
CVE-2013-2061
2013-11-17 00:00:00
securityvulns
securityvulns
[ MDVSA-2013:167 ] openvpn
2013-06-05 00:00:00
OpenVPN cryptography weakness
2013-06-05 00:00:00
nvd
nvd
CVE-2013-2061
2013-11-18 02:55:07
kaspersky
kaspersky
KLA10281 OSI vulnerability in OpenVPN
2013-11-17 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: openvpn-2.3.1-2.fc17
2013-05-16 02:50:42
[SECURITY] Fedora 18 Update: openvpn-2.3.1-2.fc18
2013-05-16 03:04:28
amazon
amazon
Low: openvpn
2013-06-11 22:47:00
cvelist
cvelist
CVE-2013-2061
2013-11-15 18:16:00
cve
cve
CVE-2013-2061
2013-11-18 02:55:07
debiancve
debiancve
CVE-2013-2061
2013-11-18 02:55:07
prion
prion
Code injection
2013-11-18 02:55:00
freebsd
freebsd
OpenVPN -- potential side-channel/timing attack when comparing HMACs
2013-03-19 00:00:00
gentoo
gentoo
OpenVPN: Multiple vulnerabilities
2013-11-20 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

6.3

Confidence

Low

EPSS

0.006

Percentile

77.9%

JSON
Related for USN-2368-1
nessus11openvas8ubuntucve1securityvulns2nvd1kaspersky1fedora2amazon1cvelist1cve1debiancve1prion1freebsd1gentoo1