SB2023111004 - Multiple vulnerabilities in OpenVPN

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2023111004

SB2023111004 - Multiple vulnerabilities in OpenVPN

Published: November 10, 2023

Security Bulletin ID SB2023111004
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Denial of service

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Use-after-free (CVE-ID: CVE-2023-46850)

The vulnerability allows a remote user to gain access to sensitive information.

The vulnerability exists due to openvpn incorrectly uses a send buffer after it has been freed. Under certain circumstances the freed memory can be sent to the client peer, resulting in information disclosure. The vulnerability affects TLS configuration.


2) Division by zero (CVE-ID: CVE-2023-46849)

The vulnerability allows a remote client to perform a denial of service (DoS) attack.

The vulnerability exists due to server incorrectly restores "--fragment" configuration under certain circumstances. A remote client can cause a divide by zero error and perform a denial of service (DoS) attack.


Remediation

Install update from vendor's website.

References