CVE-2022-0547
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of defe...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-0547 openvpn Corrigé dans: 2.4.12-r0
- Debian DEBIAN-CVE-2022-0547 openvpn Corrigé dans: 2.5.1-3+deb11u1
Références
- advisory github.com
- advisory lists.fedoraproject.org
- advisory lists.fedoraproject.org
- advisory nvd.nist.gov
- web community.openvpn.net
- web community.openvpn.net
- web lists.debian.org
- web openvpn.net
- web lists.debian.org