Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2020-15078 →

DEBIAN-CVE-2020-15078

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with defer...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

OpenVPN 2.5.1 and earlier versions allows a remote attackers to bypass authentication and access control channel data on servers configured with deferred authentication, which can be used to potentially trigger further information leaks.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 openvpn

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2"}]}]

Debian:13 openvpn

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2"}]}]

Debian:14 openvpn

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-2"}]}]

Références

advisory security-tracker.debian.org