CVE-2022-33737

概要

参考情報

• openvpn.net/vpn-server-resources/release-notes · Release Notes

openvpn access server のその他の脆弱性

• CVE-2025-3110高 7.5OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform H…
• CVE-2023-46850緊急 9.8Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net…
• CVE-2023-46849高 7.5Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero be…
• CVE-2021-4234高 7.5OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the cl…
• CVE-2022-33738高 7.5OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal