Description

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.

Remediation

References

CVE-2023-46850

Related Vulnerabilities

WordPress Plugin Advanced Custom Fields PRO Multiple Security Bypass Vulnerabilities (5.10)

WordPress Plugin wp Dreamwork Gallery Arbitrary File Upload (2.3)

WordPress Plugin Duplicate Page Multiple Vulnerabilities (2.3)

WordPress Plugin wpForo Forum Cross-Site Scripting (1.4.11)

WordPress Plugin SimpleFlickr Cross-Site Request Forgery (3.0.3)

Severity

Critical

Classification

CVE-2023-46850 CWE-416 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities