Lucene search
GoogleOSV:USN-4933-1HistoryMay 04, 2021 - 11:59 a.m.
openvpn vulnerabilities
2021-05-0411:59:09
Google
osv.dev
10
openvpn
vulnerabilities
data channel
ubuntu 18.04 lts
ubuntu 20.04 lts
remote attacker
authentication bypass
cve-2020-11810
cve-2020-15078
It was discovered that OpenVPN incorrectly handled certain data channel v2
packets. A remote attacker could possibly use this issue to inject packets
using a victim’s peer-id. This issue only affected Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS. (CVE-2020-11810)
It was discovered that OpenVPN incorrectly handled deferred authentication.
When a server is configured to use deferred authentication, a remote
attacker could possibly use this issue to bypass authentication and access
control channel data. (CVE-2020-15078)
Related
openvas
openvas
Ubuntu: Security Advisory (USN-4933-1)
2021-05-05 00:00:00
openSUSE: Security Advisory for openvpn (openSUSE-SU-2021:0734-1)
2021-05-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:1577-1)
2021-06-09 00:00:00
ubuntu
ubuntu
OpenVPN vulnerabilities
2021-05-04 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : OpenVPN vulnerabilities (USN-4933-1)
2021-05-04 00:00:00
SUSE SLED15 / SLES15 Security Update : openvpn (SUSE-SU-2021:1577-1)
2021-05-13 00:00:00
openSUSE Security Update : openvpn (openSUSE-2021-734)
2021-05-18 00:00:00
suse
suse
Security update for openvpn (moderate)
2021-05-15 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: openvpn-2.5.2-1.fc34
2021-04-26 00:27:08
[SECURITY] Fedora 32 Update: openvpn-2.4.11-1.fc32
2021-04-29 01:22:33
[SECURITY] Fedora 33 Update: openvpn-2.4.11-1.fc33
2021-04-24 18:07:09
nvd
nvd
CVE-2020-15078
2021-04-26 14:15:08
CVE-2020-11810
2020-04-27 15:15:12
debian
debian
[SECURITY] [DLA 2992-1] openvpn security update
2022-05-03 12:18:13
mageia
mageia
Updated openvpn packages fix a security vulnerability
2021-06-29 20:31:40
Updated openvpn packages fix security vulnerability
2020-05-05 15:20:37
debiancve
debiancve
CVE-2020-15078
2021-04-26 14:15:08
CVE-2020-11810
2020-04-27 15:15:12
cvelist
cvelist
CVE-2020-15078
2021-04-26 13:19:45
CVE-2020-11810
2020-04-27 14:47:01
gentoo
gentoo
OpenVPN: Authentication bypass
2021-05-26 00:00:00
osv
osv
openvpn - security update
2022-05-03 00:00:00
CVE-2020-15078
2021-04-26 14:15:08
CVE-2020-11810
2020-04-27 15:15:12
prion
prion
Authentication flaw
2021-04-26 14:15:00
Code injection
2020-04-27 15:15:00
amazon
amazon
Important: openvpn
2021-09-02 22:54:00
Medium: openvpn
2020-07-28 03:26:00
freebsd
freebsd
openvpn -- deferred authentication can be bypassed in specific circumstances
2021-03-02 00:00:00
openvpn -- illegal client float can break VPN session for other users
2020-04-13 00:00:00
alpinelinux
alpinelinux
CVE-2020-15078
2021-04-26 14:15:08
CVE-2020-11810
2020-04-27 15:15:12
ubuntucve
ubuntucve
CVE-2020-15078
2021-04-26 00:00:00
CVE-2020-11810
2020-04-27 00:00:00
veracode
veracode
Information Disclosure
2021-04-29 19:55:48
Injection Vulnerability
2021-04-29 11:40:11
cve
cve
CVE-2020-15078
2021-04-26 14:15:08
CVE-2020-11810
2020-04-27 15:15:12
slackware
slackware
[slackware-security] openvpn
2020-04-17 04:52:16
altlinux
altlinux
Security fix for the ALT Linux 9 package openvpn version 2.4.9-alt1
2020-11-19 00:00:00
archlinux
archlinux
[ASA-202004-16] openvpn: denial of service
2020-04-17 00:00:00
