Medium 5.3

CVE-2024-13454

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the…

OpenVPN Easy-RSA easy-rsa easy-rsa Debian Ubuntu

Jan 20, 2025

Free vulnerability intelligence: what is new, exploited or exploitable, what affects the software you run and which version fixes it — from nearly 30 public sources, updated hourly. No account, no tracking.

A service by Aurelius Julian Ballweber — ballweber.org

Vulnerabilities

Latest
Trending
Exploited in the wild
Public exploit
Critical
Vendors & products

Browse

Weekly digest
Patch days
Weaknesses (CWE)
Archive
CISA KEV
ENISA EUVD

Advisories

BSI CERT-Bund
CISA ICS & IT
NCSC-NL
Open source (OSV)
Microsoft MSRC
Siemens ProductCERT
Schneider Electric
ABB PSIRT
SICK PSIRT
CERT@VDE
Debian
Ubuntu
Red Hat
SUSE / openSUSE
Rocky Linux
AlmaLinux
Amazon Linux
Oracle Linux

Tools

Check a version
Scan a lockfile or SBOM
Scan a server
Daily notifications
Malicious packages

Resources

About
Data sources
Methodology
Guide
API & feeds

Hosting & Security by Mediasecure We use Debian for our infrastructure

Security tooling & research in collaboration with Marian Amza

Legal notice
Privacy
Terms of use
Contact
Site map

CVE® is a registered trademark of The MITRE Corporation. Data: CVE Program, CISA, FIRST EPSS, ENISA EUVD, BSI CERT-Bund, NCSC-NL, CERT@VDE, OSV.dev, Linux distributions, vendor PSIRTs, MITRE CWE and public exploit databases — all sources.

Easy-RSA

Weak encryption algorithm in Easy-RSA version 3.0.5 through 3.1.7 allows a local attacker to more easily bruteforce the…