CVE Vulnerabilities

CVE-2024-5594

This vulnerability is marked as RESERVED by NVD. This means that the CVE-ID is reserved for future use by the CVE Numbering Authority (CNA) or a security researcher, but the details of it are not yet publicly available yet.

This page will reflect the classification results once they are available through NVD.

Any vendor information available is shown as below.

Ubuntu

control channel: refuse control channel messages with nonprintable characters in them. Security scope: a malicious openvpn peer can send garbage to openvpn log, or cause high CPU load

Affected Software List

Name Vendor Version
Openvpn Ubuntu/devel 2.6.11-1ubuntu1
Openvpn Ubuntu/focal 2.4.12-0ubuntu0.20.04.2
Openvpn Ubuntu/jammy 2.5.9-0ubuntu0.22.04.3
Openvpn Ubuntu/noble 2.6.9-1ubuntu4.1
Openvpn Ubuntu/trusty/esm TBD
Openvpn Ubuntu/upstream 2.6.11
Openvpn Ubuntu/esm-infra-legacy/trusty TBD
Openvpn Ubuntu/esm-infra/bionic TBD
Openvpn Ubuntu/esm-infra/xenial TBD
Openvpn Ubuntu/mantic 2.6.5-0ubuntu1.2
Openvpn Ubuntu/oracular 2.6.11-1ubuntu1