Description
The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | OpenVPN 3 Core Library | 3.0 – ≤ 3.8.3 | — |
Advisories 1
- WID-SEC-2024-0514 OpenVPN: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Feb 28, 2024
References
- https://community.openvpn.net/openvpn/wiki/CVE-2023-6247 technical-description