PT-2017-17761 · Openvpn+3 · Openvpn+3

Publicado 2017-05-15 · Atualizado 2017-10-24 · CVE-2017-7478

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenVPN versions 2.3.12 through 2.3.14 OpenVPN versions 2.4.0 through 2.4.1

Description The issue allows for an unauthenticated Denial of Service of the server via a received large control packet.

Recommendations For OpenVPN versions 2.3.12 through 2.3.14, update to version 2.3.15. For OpenVPN versions 2.4.0 through 2.4.1, update to version 2.4.2.

Exploit

Correção

DoS

RCE

Assertion Failure

Enumeração de Fraquezas

CWE-20

CWE-617

Identificadores relacionados

ALT-PU-2017-1606

CVE-2017-7478

MGASA-2017-0152

SUSE-SU-2017:1622-1

SUSE-SU-2017:1718-1

SUSE-SU-2017:2838-1

SUSE-SU-2017_1718-1

Produtos afetados

Alt Linux

Openvpn

Suse

Ubuntu

Referências · 49

• 🔥 https://exploit-db.com/exploits/41993 · Exploit
• https://osv.dev/vulnerability/ALPINE-CVE-2017-7478 · Aviso do Fabricante
• https://security.alpinelinux.org/vuln/CVE-2017-7478 · Nota
• https://bdu.fstec.ru/vul/2018-00021 · Nota de Segurança
• https://suse.com/support/update/announcement/2017/suse-su-20172838-1 · Nota
• https://bugzilla.suse.com/1060877 · Nota
• https://suse.com/security/cve/CVE-2017-7521 · Nota
• https://suse.com/security/cve/CVE-2017-7478.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7478 · Nota de Segurança
• https://suse.com/security/cve/CVE-2016-6329 · Nota
• https://suse.com/security/cve/CVE-2017-12166 · Nota
• https://suse.com/security/cve/CVE-2017-7521.html · Nota
• https://osv.dev/vulnerability/SUSE-SU-2017:1718-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/MGASA-2017-0152 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2017-7479.html · Nota