Vulnerability Details CVE-2023-6247
The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.8%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2023-6247
-
cpe:2.3:a:openvpn:openvpn_3:3.3
-
cpe:2.3:a:openvpn:openvpn_3:3.3.1
-
cpe:2.3:a:openvpn:openvpn_3:3.3.2
-
cpe:2.3:a:openvpn:openvpn_3:3.3.3
-
cpe:2.3:a:openvpn:openvpn_3:3.3.4
-
cpe:2.3:a:openvpn:openvpn_3:3.4
-
cpe:2.3:a:openvpn:openvpn_3:3.4.1
-
cpe:2.3:a:openvpn:openvpn_3:3.4.2
-
cpe:2.3:a:openvpn:openvpn_3:3.4.3
-
cpe:2.3:a:openvpn:openvpn_3:3.5
-
cpe:2.3:a:openvpn:openvpn_3:3.5.1
-
cpe:2.3:a:openvpn:openvpn_3:3.5.2
-
cpe:2.3:a:openvpn:openvpn_3:3.5.3
-
cpe:2.3:a:openvpn:openvpn_3:3.5.4
-
cpe:2.3:a:openvpn:openvpn_3:3.5.5
-
cpe:2.3:a:openvpn:openvpn_3:3.5.6
-
cpe:2.3:a:openvpn:openvpn_3:3.5.7
-
cpe:2.3:a:openvpn:openvpn_3:3.5.8
-
cpe:2.3:a:openvpn:openvpn_3:3.6.2
-
cpe:2.3:a:openvpn:openvpn_3:3.6.3
-
cpe:2.3:a:openvpn:openvpn_3:3.6.4
-
cpe:2.3:a:openvpn:openvpn_3:3.6.5
-
cpe:2.3:a:openvpn:openvpn_3:3.6.6
-
cpe:2.3:a:openvpn:openvpn_3:3.6.7
-
cpe:2.3:a:openvpn:openvpn_3:3.7
-
cpe:2.3:a:openvpn:openvpn_3:3.7.1
-
cpe:2.3:a:openvpn:openvpn_3:3.7.2
-
cpe:2.3:a:openvpn:openvpn_3:3.8
-
cpe:2.3:a:openvpn:openvpn_3:3.8.1
-
cpe:2.3:a:openvpn:openvpn_3:3.8.2
-
cpe:2.3:a:openvpn:openvpn_3:3.8.3