NetSight
IP …
high7.5

CVE-2023-46849

Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could…

Impact

Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an application crash, leading to a denial of service.

Affected products

VendorProductAffected versions
OpenvpnOpenvpn
from 2.6.0 through 2.6.6
OpenvpnOpenvpn Access Server
from 2.11.0 through 2.11.3
Versions 2.12.0, 2.12.1
DebianDebian Linux
Version 12.0
FedoraprojectFedora
Version 39

Weakness classification

CWE-369

References