CVE-2017-5868

概要

参考情報

• openwall.com/lists/oss-security/2017/05/23/13 · Exploit
• securitytracker.com/id/1038547 · Third Party Advisory
• sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injection-with-session-fixation · Exploit

openvpn access server のその他の脆弱性

• CVE-2025-3110高 7.5OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform H…
• CVE-2023-46850緊急 9.8Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net…
• CVE-2023-46849高 7.5Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero be…
• CVE-2021-4234高 7.5OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the cl…
• CVE-2022-33738高 7.5OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal