cbcvebase.

Openvpn Access Server vulnerabilities

21 known vulnerabilities affecting openvpn/openvpn_access_server.

Total CVEs
21
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH9MEDIUM8LOW1

Vulnerabilities

Page 2 of 2
CVE-2013-2061P4LOWCVSS 2.6v2.0.02013-11-18
CVE-2013-2061 [LOW] CWE-200 CVE-2013-2061: The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, all The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher.
nvd
← Previous2 / 2
Openvpn Access Server vulnerabilities | cvebase