CVE-2020-36382
04.06.2021, 11:15
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| openvpn | openvpn_access_server | 2.7.3 ≤ 𝑥 ≤ 2.8.7 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-754 - Improper Check for Unusual or Exceptional ConditionsThe software does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the software.
- CWE-617 - Reachable AssertionThe product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.
References