CVE-2017-5868

Description

References

• openwall.com/lists/oss-security/2017/05/23/13 · Exploit
• securitytracker.com/id/1038547 · Third Party Advisory
• sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injection-with-session-fixation · Exploit

openvpn access server 的其他漏洞

• CVE-2025-3110高危 7.5OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform H…
• CVE-2023-46850严重 9.8Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending net…
• CVE-2023-46849高危 7.5Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero be…
• CVE-2021-4234高危 7.5OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the cl…
• CVE-2022-33738高危 7.5OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal