FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
2fe004f5-83fd-11ee-9f5d-31909fb2f495	openvpn -- 2.6.0...2.6.6 --fragment option division by zero crash, and TLS data leak The OpenVPN community project team reports: CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly restore "--fragment" configuration in some circumstances, leading to a division by zero when "--fragment" is used. On platforms where division by zero is fatal, this will cause an OpenVPN crash. Reported by Niccolo Belli and WIPocket (Github #400, #417). CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly use a send buffer after it has been free()d in some circumstances, causing some free()d memory to be sent to the peer. All configurations using TLS (e.g. not using --secret) are affected by this issue. (found while tracking down CVE-2023-46849 / Github #400, #417) Discovery 2023-08-29 Entry 2023-11-15 Modified 2023-12-31 openvpn >= 2.6.0 lt 2.6.7_1 openvpn-devel < g20231109,1 CVE-2023-46849 CVE-2023-46850 https://github.com/OpenVPN/openvpn/blob/v2.6.7/Changes.rst#overview-of-changes-in-267
142c538e-b18f-40a1-afac-c479effadd5c	openvpn -- two security fixes Gert Doering reports that OpenVPN 2.6.11 fixes two security bugs (three on Windows): CVE-2024-5594: control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load. (Reynir BjÃÂ¶rnsson) CVE-2024-28882: only call schedule_exit() once (on a given peer). Security scope: an authenticated client can make the server "keep the session" even when the server has been told to disconnect this client. (Reynir BjÃÂ¶rnsson) Discovery 2024-05-16 Entry 2024-06-20 openvpn < 2.6.11 CVE-2024-5594 CVE-2024-28882 https://github.com/OpenVPN/openvpn/blob/v2.6.11/Changes.rst#security-fixes

VuXML ID

Description

2fe004f5-83fd-11ee-9f5d-31909fb2f495

openvpn -- 2.6.0...2.6.6 --fragment option division by zero crash, and TLS data leak

The OpenVPN community project team reports:

CVE-2023-46849 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly restore "--fragment" configuration in some circumstances, leading to a division by zero when "--fragment" is used. On platforms where division by zero is fatal, this will cause an OpenVPN crash.

Reported by Niccolo Belli and WIPocket (Github #400, #417).

CVE-2023-46850 OpenVPN versions between 2.6.0 and 2.6.6 incorrectly use a send buffer after it has been free()d in some circumstances, causing some free()d memory to be sent to the peer. All configurations using TLS (e.g. not using --secret) are affected by this issue. (found while tracking down CVE-2023-46849 / Github #400, #417)

Discovery 2023-08-29
Entry 2023-11-15
Modified 2023-12-31
openvpn

>= 2.6.0 lt 2.6.7_1

openvpn-devel

< g20231109,1

CVE-2023-46849
CVE-2023-46850
https://github.com/OpenVPN/openvpn/blob/v2.6.7/Changes.rst#overview-of-changes-in-267

142c538e-b18f-40a1-afac-c479effadd5c

openvpn -- two security fixes

Gert Doering reports that OpenVPN 2.6.11 fixes two security bugs (three on Windows):

CVE-2024-5594: control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load. (Reynir BjÃÂ¶rnsson)

CVE-2024-28882: only call schedule_exit() once (on a given peer). Security scope: an authenticated client can make the server "keep the session" even when the server has been told to disconnect this client. (Reynir BjÃÂ¶rnsson)

Discovery 2024-05-16
Entry 2024-06-20
openvpn

< 2.6.11

CVE-2024-5594
CVE-2024-28882
https://github.com/OpenVPN/openvpn/blob/v2.6.11/Changes.rst#security-fixes