CVE-2017-7520
- Source
- https://cve.org/CVERecord?id=CVE-2017-7520
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-7520.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2017-7520
- Downstream
DEBIAN (1)
MGASA (1)
UBUNTU (1)
- Related
- Published
- 2017-06-27T13:29:00Z
- Modified
- 2026-10-16T02:45:15Z
- Severity
-
- 7.4 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.
- Database specific
{ "unresolved_ranges": [ { "cpes": [ "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "last_affected": "2.3.16" } ], "source": "CPE_RANGE" } ], "vendor_product": "openvpn:openvpn" }, { "cpes": [ "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.0:alpha2:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.0:beta1:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.0:beta2:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.0:rc1:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.0:rc2:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*" ], "extracted_events": [ { "range": [ { "introduced": "2.4.0" }, { "last_affected": "2.4.0" }, { "introduced": "2.4.0-alpha2" }, { "last_affected": "2.4.0-alpha2" }, { "introduced": "2.4.0-alpha2" }, { "last_affected": "2.4.0-alpha2" }, { "introduced": "2.4.0-beta1" }, { "last_affected": "2.4.0-beta1" }, { "introduced": "2.4.0-beta1" }, { "last_affected": "2.4.0-beta1" }, { "introduced": "2.4.0-beta2" }, { "last_affected": "2.4.0-beta2" }, { "introduced": "2.4.0-beta2" }, { "last_affected": "2.4.0-beta2" }, { "introduced": "2.4.0-rc1" }, { "last_affected": "2.4.0-rc1" }, { "introduced": "2.4.0-rc1" }, { "last_affected": "2.4.0-rc1" }, { "introduced": "2.4.0-rc2" }, { "last_affected": "2.4.0-rc2" }, { "introduced": "2.4.0-rc2" }, { "last_affected": "2.4.0-rc2" }, { "introduced": "2.4.1" }, { "last_affected": "2.4.1" }, { "introduced": "2.4.2" }, { "last_affected": "2.4.2" } ], "source": "CPE_STRING" } ], "vendor_product": "openvpn:openvpn" } ] }- References
Affected packages
Git / github.com/openvpn/openvpn
Affected ranges
- Type
- GIT
- Repo
- https://github.com/openvpn/openvpn
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "last_affected": "2.3.16" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:openvpn:openvpn:2.4.0:*:*:*:*:*:*:*", "range": [ { "introduced": "2.4.0" }, { "last_affected": "2.4.0" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:openvpn:openvpn:2.4.1:*:*:*:*:*:*:*", "range": [ { "introduced": "2.4.1" }, { "last_affected": "2.4.1" } ], "source": "CPE_STRING" }, { "cpe": "cpe:2.3:a:openvpn:openvpn:2.4.2:*:*:*:*:*:*:*", "range": [ { "introduced": "2.4.2" }, { "last_affected": "2.4.2" } ], "source": "CPE_STRING" } ] }
Affected versions
2.*
2.4.0
2.4.1
2.4.2
Other
contains
v2.*
v2.1.0
v2.1.1
v2.1.2
v2.1.3
v2.1_rc1
v2.1_rc10
v2.1_rc11
v2.1_rc12
v2.1_rc13
v2.1_rc14
v2.1_rc15
v2.1_rc16
v2.1_rc17
v2.1_rc18
v2.1_rc19
v2.1_rc2
v2.1_rc20
v2.1_rc21
v2.1_rc22
v2.1_rc3
v2.1_rc4
v2.1_rc5
v2.1_rc6
v2.1_rc7
v2.1_rc8
v2.1_rc9
v2.2-RC
v2.2-RC2
v2.2-beta4
v2.2-beta5
v2.3-alpha1
v2.3.0
v2.3.1
v2.3.10
v2.3.11
v2.3.12
v2.3.13
v2.3.14
v2.3.15
v2.3.16
v2.3.2
v2.3.3
v2.3.4
v2.3.5
v2.3.6
v2.3.7
v2.3.8
v2.3.9
v2.3_alpha2
v2.3_alpha3
v2.3_beta1
v2.3_rc1
v2.3_rc2
v2.4.0
v2.4.1
v2.4.2