Log in Start free

Vulnerability · Published Nov 11, 2023 · Assigned by OpenVPN

CVE-2023-46850

Critical 9.8

In plain English

A critical-severity use-after-free in Access Server from OpenVPN. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.0% (higher than 81% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)2.0%top 19.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Alpine:v3.20openvpn2.6.7-r0ALPINE-CVE-2023-46850
Alpine:v3.21openvpn2.6.7-r0ALPINE-CVE-2023-46850
Alpine:v3.22openvpn2.6.7-r0ALPINE-CVE-2023-46850
Alpine:v3.23openvpn2.6.7-r0ALPINE-CVE-2023-46850
Alpine:v3.24openvpn2.6.7-r0ALPINE-CVE-2023-46850
Debian:12openvpn2.6.3-1+deb12u2DEBIAN-CVE-2023-46850
Debian:12openvpn2.6.3-1+deb12u2DSA-5555-1
Debian:13openvpn2.6.7-1DEBIAN-CVE-2023-46850
Debian:14openvpn2.6.7-1DEBIAN-CVE-2023-46850
Ubuntu:22.04:LTSopenvpn2.5.5-1ubuntu3.1UBUNTU-CVE-2023-46850

Affected products (as reported)

VendorProductVersions
OpenVPN OpenVPN 2 (Community) 2.6.0 – through 2.6.6
OpenVPN Access Server 2.11.0 – through 2.11.32.12.0 – through 2.12.2

Weakness: CWE-416

References