Approved changes feed: RSS · Atom

cpe:2.3:a:openvpn:openvpn_access_server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOpenvpn (69250643-f594-58ab-9395-086994cbe5f3)
ProductOpenvpn Access Server (bd9f7b68-153e-59a6-af5f-9021bb1921f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:gem/lita-openvpnas purl2cpe 2026-06-01 10:12:10.687721
pkg:github/openvpn/puppet-openvpnas purl2cpe 2026-06-01 10:12:10.687723
pkg:npm/openvpn-access-server-scripts purl2cpe 2026-06-01 10:12:10.687725
pkg:pypi/pyovpn-as purl2cpe 2026-06-01 10:12:10.687726

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-46850 vulnerable 2026-06-08 06:14:23.591756 Details available
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.
Published: 2023-11-11T00:15:07.076Z
Updated: 2026-06-23T21:24:00.414Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46849 vulnerable 2026-06-08 06:14:23.588014 Details available
Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could cause an application crash, leading to a denial of service.
Published: 2023-11-11T00:05:13.487Z
Updated: 2025-06-11T14:30:02.796Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33738 vulnerable 2026-06-08 05:44:51.199200 Details available
OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
Published: 2022-07-06T15:10:33.000Z
Updated: 2024-08-03T08:09:22.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-33737 vulnerable 2026-06-08 05:44:51.198791 Details available
The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin password
Published: 2022-07-06T15:09:08.000Z
Updated: 2024-08-03T08:09:22.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-4234 vulnerable 2026-06-08 05:38:08.993524 Details available
OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.
Published: 2022-07-06T19:10:17.000Z
Updated: 2024-08-03T17:23:09.056Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-3824 vulnerable 2026-06-08 05:33:54.382757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8953 vulnerable 2026-06-08 05:27:20.031330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36382 vulnerable 2026-06-08 05:25:02.999251 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15077 vulnerable 2026-06-08 05:19:25.215168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15074 vulnerable 2026-06-08 05:19:25.210878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11462 vulnerable 2026-06-08 05:16:47.240968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-9104 vulnerable 2026-06-08 05:06:10.897000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-2692 vulnerable 2026-06-08 05:04:27.273284 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.