Alpine/openvpn: critical 9.8
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.
Action: Upgrade openvpn to 2.6.7-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.6.0 | 2.6.7-r0 | - |
Fixed versions
| 2.6.7-r0 |
Sources
- osv: ALPINE-CVE-2023-46850#Alpine:v3.21/openvpn
- https://security.alpinelinux.org/vuln/CVE-2023-46850
published · modified · JSON