CVE-2025-3110

概要

参考情報

• openvpn.net/as-docs/as-3-2-release-notes.html · Release Notes

openvpn access server のその他の脆弱性

• CVE-2023-46850緊急 9.8Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net…
• CVE-2023-46849高 7.5Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero be…
• CVE-2021-4234高 7.5OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the cl…
• CVE-2022-33738高 7.5OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
• CVE-2022-33737高 7.5The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a rand…