CVE-2024-28882
published 2024-07-08CVE-2024-28882: OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing…
PriorityP420medium4.3CVSS 3.1
AVNACLPRLUINSUCNINAL
EPSS
0.66%
47.8th percentile
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | openvpn | < openvpn 2.6.3-1+deb12u3 (bookworm) | openvpn 2.6.3-1+deb12u3 (bookworm) |
| openvpn | openvpn | >= 0 < 2.6.3-1+deb12u3 | 2.6.3-1+deb12u3 |
| openvpn | openvpn | >= 0 < 2.6.11-1 | 2.6.11-1 |
| openvpn | openvpn | >= 0 < 2.6.11-1 | 2.6.11-1 |
| openvpn | openvpn | >= 0 < 2.4.12-0ubuntu0.20.04.2 | 2.4.12-0ubuntu0.20.04.2 |
| openvpn | openvpn | >= 0 < 2.5.9-0ubuntu0.22.04.3 | 2.5.9-0ubuntu0.22.04.3 |
| openvpn | openvpn | >= 0 < 2.6.9-1ubuntu4.1 | 2.6.9-1ubuntu4.1 |
| openvpn | openvpn | >= 2.6.0 < 2.6.11 | 2.6.11 |
| openvpn | openvpn | 2.6.0 – 2.6.10 | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
osv4.3MEDIUM
vendor_debian4.3MEDIUM
vendor_ubuntu4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Siemens SINEMA Remote Connect Client
cisa_ics·2025-03-13·CVSS 9.8
[CRITICAL] Siemens SINEMA Remote Connect Client
ICS Advisory
##
Siemens SINEMA Remote Connect Client
Release DateMarch 13, 2025
Alert CodeICSA-25-072-10
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 9.3
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SINEMA Remote Connect Client
- Vulnerabilities: Integer Overflow or Wraparound, Unprotected Alternate Channel, Improper Restrictio
CISA ICS
Siemens SINEMA Remote Connect Server
cisa_ics·2025-03-13·CVSS 4.3
[MEDIUM] Siemens SINEMA Remote Connect Server
ICS Advisory
##
Siemens SINEMA Remote Connect Server
Release DateMarch 13, 2025
Alert CodeICSA-25-072-02
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 7.1
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SINEMA Remote Connect Server
- Vulnerabilities: Improper Output Neutralization for Logs, Missing Release of Resource after Effecti
CISA ICS
Siemens SCALANCE M-800 Family
cisa_ics·2024-11-14
Siemens SCALANCE M-800 Family
ICS Advisory
##
Siemens SCALANCE M-800 Family
Release DateNovember 14, 2024
Alert CodeICSA-24-319-06
Related topics:
Industrial Control System Vulnerabilities, Industrial Control Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global).
View CSAF
## 1. EXECUTIVE SUMMARY
- CVSS v4 8.6
- ATTENTION: Exploitable remotely/low attack complexity
- Vendor: Siemens
- Equipment: SCALANCE M-800 Family
- Vulnerabilities: Out-of-bounds Read, Missing Encryption of Sensitive Data, Integer Overflow or Wraparou
Ubuntu
OpenVPN vulnerabilities
vendor_ubuntu·2024-07-02·CVSS 4.3
CVE-2024-5594 [MEDIUM] OpenVPN vulnerabilities
Title: OpenVPN vulnerabilities
Summary: Several security issues were fixed in OpenVPN.
Reynir Björnsson discovered that OpenVPN incorrectly handled terminating
client connections. A remote authenticated client could possibly use this
issue to keep the connection active, bypassing certain security policies.
This issue only affected Ubuntu 23.10, and Ubuntu 24.04 LTS.
(CVE-2024-28882)
Reynir Björnsson discovered that OpenVPN incorrectly handled certain
control channel messages with nonprintable characters. A remote attacker
could possibly use this issue to cause OpenVPN to consume resources, or
fill up log files with garbage, leading to a denial of service.
(CVE-2024-5594)
Instructions: In general, a standard system update will make all the necessary changes.
Debian
CVE-2024-28882: openvpn - OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notific...
vendor_debian·2024·CVSS 4.3
CVE-2024-28882 [MEDIUM] CVE-2024-28882: openvpn - OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notific...
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
Scope: local
bookworm: resolved (fixed in 2.6.3-1+deb12u3)
bullseye: resolved
forky: resolved (fixed in 2.6.11-1)
sid: resolved (fixed in 2.6.11-1)
trixie: resolved (fixed in 2.6.11-1)
GHSA
GHSA-v34q-j8xh-hjgx: OpenVPN 2
ghsa_unreviewed·2024-07-09
CVE-2024-28882 [MEDIUM] CWE-772 GHSA-v34q-j8xh-hjgx: OpenVPN 2
OpenVPN 2.6.10 and earlier in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
OSV
CVE-2024-28882: OpenVPN from 2
osv·2024-07-08·CVSS 4.3
CVE-2024-28882 [MEDIUM] CVE-2024-28882: OpenVPN from 2
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
OSV
openvpn vulnerabilities
osv·2024-07-02·CVSS 4.3
CVE-2024-28882 [MEDIUM] openvpn vulnerabilities
openvpn vulnerabilities
Reynir Björnsson discovered that OpenVPN incorrectly handled terminating
client connections. A remote authenticated client could possibly use this
issue to keep the connection active, bypassing certain security policies.
This issue only affected Ubuntu 23.10, and Ubuntu 24.04 LTS.
(CVE-2024-28882)
Reynir Björnsson discovered that OpenVPN incorrectly handled certain
control channel messages with nonprintable characters. A remote attacker
could possibly use this issue to cause OpenVPN to consume resources, or
fill up log files with garbage, leading to a denial of service.
(CVE-2024-5594)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-08
Published