| Package | Affected versions | Patched versions |
|---|---|---|
| openvpn | ≥ 2.6.0, < 2.6.11 | 2.6.11 |
OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free