Summary
It was discovered that OpenVPN incorrectly handled certain configurations
with multiple authentication plugins. A remote attacker could possibly use
this issue to bypass authentication using incomplete credentials.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | openvpn | 2.4.4-2ubuntu1.7 |
| Ubuntu · 20.04 LTS 20.04:LTS | openvpn | 2.4.7-1ubuntu2.20.04.4 |
Vulnerabilities 1
-
Critical 9.8
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more tha…
References
-
report
https://ubuntu.com/security/CVE-2022-0547