CVE-2023-46850

Published Nov 11, 2023

Last updated a year ago

CVSS critical 9.8
Tunneling protocol
VPN

Overview

Description
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.
Source
security@openvpn.net
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

security@openvpn.net
CWE-416
nvd@nist.gov
CWE-416

Social media

Hype score
Not currently trending

Configurations