Summary
It was discovered that OpenVPN incorrectly handled certain configurations
with multiple authentication plugins. A remote attacker could possibly use
this issue to bypass authentication using incomplete credentials.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | openvpn | 2.3.2-7ubuntu3.2+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | openvpn | 2.3.10-1ubuntu2.2+esm1 |
Vulnerabilities 1
-
Critical 9.8
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more tha…
References
-
report
https://ubuntu.com/security/CVE-2022-0547