https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:36:21 +0000 https://vulnerability.circl.lu/vuln/cve-2024-5594 <p><strong>Affected:</strong> OpenVPN</p> <p>OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.</p> <p><strong>Affected:</strong> OpenVPN</p> <p>OpenVPN before 2.6.11 does not santize PUSH_REPLY messages properly which an attacker controlling the server can use to inject unexpected arbitrary data ending up in client logs.</p> https://vulnerability.circl.lu/vuln/cve-2024-5594 https://vulnerability.circl.lu/vuln/usn-6860-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: openvpn, Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn</p> <p>Reynir Björnsson discovered that OpenVPN incorrectly handled terminating client connections. A remote authenticated client could possibly use this issue to keep the connection active, bypassing certain security policies. This issue only affected Ubuntu 23.10, and Ubuntu 24.04 LTS. (CVE-2024-28882)</p> <p>Reynir Björnsson discovered that OpenVPN incorrectly handled certain control channel messages with nonprintable characters. A remote attacker could possibly use this issue to cause OpenVPN to consume resources, or fill up log files with garbage, leading to a denial of service. (CVE-2024-5594)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: openvpn, Ubuntu:22.04:LTS: openvpn, Ubuntu:24.04:LTS: openvpn</p> <p>Reynir Björnsson discovered that OpenVPN incorrectly handled terminating client connections. A remote authenticated client could possibly use this issue to keep the connection active, bypassing certain security policies. This issue only affected Ubuntu 23.10, and Ubuntu 24.04 LTS. (CVE-2024-28882)</p> <p>Reynir Björnsson discovered that OpenVPN incorrectly handled certain control channel messages with nonprintable characters. A remote attacker could possibly use this issue to cause OpenVPN to consume resources, or fill up log files with garbage, leading to a denial of service. (CVE-2024-5594)</p> https://vulnerability.circl.lu/vuln/usn-6860-1