https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:43:56.983167+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2024-5594 CVE-2024-5594 2026-09-28T19:43:56.992442+00:00

Affected: OpenVPN

OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.

 https://vulnerability.circl.lu/vuln/usn-6860-1 USN-6860-1 — openvpn vulnerabilities 2026-09-28T19:43:56.992932+00:00

Affected: Ubuntu:20.04:LTS: openvpn, Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn

Reynir Björnsson discovered that OpenVPN incorrectly handled terminating client connections. A remote authenticated client could possibly use this issue to keep the connection active, bypassing certain security policies. This issue only affected Ubuntu 23.10, and Ubuntu 24.04 LTS. (CVE-2024-28882)

Reynir Björnsson discovered that OpenVPN incorrectly handled certain control channel messages with nonprintable characters. A remote attacker could possibly use this issue to cause OpenVPN to consume resources, or fill up log files with garbage, leading to a denial of service. (CVE-2024-5594)