Vulnerability Details CVE-2018-9336
openvpnserv.exe (aka the interactive service helper) in OpenVPN 2.4.x before 2.4.6 allows a local attacker to cause a double-free of memory by sending a malformed request to the interactive service. This could cause a denial-of-service through memory corruption or possibly have unspecified other impact including privilege escalation.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 26.4%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.568761
- https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
- https://github.com/OpenVPN/openvpn/commit/1394192b210cb3c6624a7419bcf3ff966742e79b
- https://github.com/OpenVPN/openvpn/releases/tag/v2.4.6
- https://www.tenable.com/security/research/tra-2018-09
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2018&m=slackware-security.568761
- https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
- https://github.com/OpenVPN/openvpn/commit/1394192b210cb3c6624a7419bcf3ff966742e79b
- https://github.com/OpenVPN/openvpn/releases/tag/v2.4.6
- https://www.tenable.com/security/research/tra-2018-09
Products affected by CVE-2018-9336
-
cpe:2.3:a:openvpn:openvpn:2.4.0
-
cpe:2.3:a:openvpn:openvpn:2.4.1
-
cpe:2.3:a:openvpn:openvpn:2.4.2
-
cpe:2.3:a:openvpn:openvpn:2.4.3
-
cpe:2.3:a:openvpn:openvpn:2.4.4
-
cpe:2.3:a:openvpn:openvpn:2.4.5
-
cpe:2.3:o:slackware:slackware_linux:13.0
-
cpe:2.3:o:slackware:slackware_linux:13.1
-
cpe:2.3:o:slackware:slackware_linux:13.37
-
cpe:2.3:o:slackware:slackware_linux:14.0
-
cpe:2.3:o:slackware:slackware_linux:14.1