Unrated
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a...
CVE-2024-28882
First seen on SecPulse
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2024-28882 openvpn Fixed in: 2.6.11-r0
- Debian DEBIAN-CVE-2024-28882 openvpn Fixed in: 2.6.3-1+deb12u3
References
- advisory github.com
- advisory nvd.nist.gov
- web community.openvpn.net
- web mail-archive.com