Lucene search
GoogleOSV:CVE-2022-0547HistoryMar 18, 2022 - 6:15 p.m.
CVE-2022-0547
2022-03-1818:15:12
Google
osv.dev
12
openvpn
authentication bypass
external plug-ins
deferred authentication
access granted
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
References
community.openvpn.net/openvpn/wiki/CVE-2022-0547
community.openvpn.net/openvpn/wiki/SecurityAnnouncements
lists.debian.org/debian-lts-announce/2022/05/msg00002.html
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GFXJ35WKPME4HYNQCQNAJHLCZOJL2SAE/
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R36OYC5SJ6FLPVAYJYYT4MOJ2I7MGYFF/
openvpn.net/community-downloads/
Related
fedora
fedora
[SECURITY] Fedora 34 Update: openvpn-2.5.6-1.fc34
2022-03-24 14:53:13
[SECURITY] Fedora 36 Update: openvpn-2.5.6-1.fc36
2022-03-26 15:53:41
[SECURITY] Fedora 35 Update: openvpn-2.5.6-1.fc35
2022-03-17 15:49:05
suse
suse
Security update for openvpn (important)
2022-03-29 00:00:00
Security update for openvpn (moderate)
2022-06-03 00:00:00
veracode
veracode
Access-Control Bypass
2022-03-26 07:55:18
redos
redos
ROS-20220329-03
2022-03-29 00:00:00
openvas
openvas
Fedora: Security Advisory for openvpn (FEDORA-2022-cb4c1146dc)
2022-03-27 00:00:00
Fedora: Security Advisory for openvpn (FEDORA-2022-a9bd17092d)
2022-03-23 00:00:00
openSUSE: Security Advisory for openvpn (openSUSE-SU-2022:1029-1)
2022-03-30 00:00:00
nessus
nessus
Ubuntu 14.04 LTS / 16.04 LTS : OpenVPN vulnerability (USN-6850-1)
2024-06-26 00:00:00
Amazon Linux AMI : openvpn (ALAS-2023-1719)
2023-04-06 00:00:00
osv
osv
openvpn-2.5.6-1.1 on GA media
2024-06-15 00:00:00
openvpn vulnerability
2024-06-26 01:06:38
openvpn vulnerability
2022-03-24 12:13:58
cve
cve
CVE-2022-0547
2022-03-18 18:15:12
debiancve
debiancve
CVE-2022-0547
2022-03-18 18:15:12
ubuntu
ubuntu
OpenVPN vulnerability
2022-03-24 00:00:00
OpenVPN vulnerability
2024-06-26 00:00:00
cloudlinux
cloudlinux
Fix of CVE: CVE-2022-0547
2022-04-05 15:03:38
mageia
mageia
Updated openvpn packages fix security vulnerability
2022-03-30 20:06:56
alpinelinux
alpinelinux
CVE-2022-0547
2022-03-18 18:15:12
prion
prion
Authentication flaw
2022-03-18 18:15:00
cvelist
cvelist
CVE-2022-0547
2022-03-18 18:00:20
freebsd
freebsd
amazon
amazon
Low: openvpn
2023-03-30 22:50:00
altlinux
altlinux
Security fix for the ALT Linux 10 package openvpn version 2.5.6-alt1
2022-05-24 00:00:00
Security fix for the ALT Linux 9 package openvpn version 2.5.6-alt1
2022-09-28 00:00:00
ubuntucve
ubuntucve
CVE-2022-0547
2022-03-18 00:00:00
nvd
nvd
CVE-2022-0547
2022-03-18 18:15:12
gentoo
gentoo
OpenVPN: Multiple Vulnerabilities
2024-09-22 00:00:00
debian
debian
[SECURITY] [DLA 2992-1] openvpn security update
2022-05-03 12:18:13
ibm
ibm
ics
ics
Siemens SINAMICS Medium Voltage Products
2023-06-15 12:00:00
Siemens SCALANCE, RUGGEDCOM Third-Party
2023-03-16 12:00:00