Summary
It was discovered that OpenVPN incorrectly handled the --fragment option
in certain configurations. A remote attacker could possibly use this issue
to cause OpenVPN to crash, resulting in a denial of service.
(CVE-2023-46849)
It was discovered that OpenVPN incorrectly handled certain memory
operations. A remote attacker could use this issue to cause OpenVPN to
crash, obtain sensitive information, or possibly execute arbitrary code.
(CVE-2023-46850)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 23.10 | openvpn | 2.6.5-0ubuntu1.1 |