CVE Catalog
CVE-2023-46850
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk1.98%
78th percentile - higher than 78% of all known CVEs
Summary
OpenVPN versions 2.6.0 to 2.6.6 contain a use after free vulnerability that may lead to undefined behavior, leaking memory buffers, or remote code execution when sending network buffers to a remote peer.
Risk Assessment
This vulnerability may allow attackers to execute code remotely, posing a serious security threat to systems using OpenVPN.
Recommendation
It is recommended to update OpenVPN to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activity.
Original NVD description (English source)
Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.