OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.
{ "ubuntu_priority": "low" }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.4.4-2ubuntu1", "binary_name": "openvpn" }, { "binary_version": "2.4.4-2ubuntu1", "binary_name": "openvpn-dbgsym" } ] }
{ "availability": "No subscription required", "ubuntu_priority": "low", "binaries": [ { "binary_version": "2.4.7-1ubuntu2", "binary_name": "openvpn" }, { "binary_version": "2.4.7-1ubuntu2", "binary_name": "openvpn-dbgsym" } ] }