OpenVPN 2 vulnerabilities

2 known vulnerabilities in OpenVPN 2 from OpenVPN. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  OpenVPN 2: Unrestricted Upload of File with Dangerous Type

  CVE-2024-27903Jul 8, 2024OpenVPNEPSS 8.92%

  OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.

• 7.5 High severity

  OpenVPN 2: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2024-24974Jul 8, 2024OpenVPNEPSS 9.76%

  The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.