CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of defe...
Original description
The description as published by the source.
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-0547 openvpn Fixed in: 2.4.12-r0
- Debian DEBIAN-CVE-2022-0547 openvpn Fixed in: 2.5.1-3+deb11u1
References
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- web community.openvpn.net
- web community.openvpn.net
- web lists.debian.org
- web openvpn.net
- web lists.debian.org