High DSA-5555-1 2 CVEs

openvpn - security update

Published Nov 15, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 12	openvpn	2.6.3-1+deb12u2

Vulnerabilities 2

High 7.5

CVE-2023-46849

Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigge…

OpenVPN Access Server OpenVPN 2 (Community) openvpn Debian Alpine

Nov 11, 2023
Unscored —

CVE-2023-46850

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execu…

OpenVPN Access Server OpenVPN 2 (Community) openvpn Debian Alpine

Nov 11, 2023