CVEvulnerability

CVE-2020-36382

7.5 HIGH Published 2021-06-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-06-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-617, CWE-754

Description

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.

Affected configurations

• openvpn openvpn access server (>= 2.7.3 <= 2.8.7)

Related

Weakness · CWE (2)

  • CWE-617 Reachable Assertion weakness
  • CWE-754 Improper Check for Unusual or Exceptional Conditions weakness

References