Wind River Support Network

HomeDefectsLIN8-7945

Fixed

LIN8-7945 : Security Advisory - openvpn - CVE-2017-12166

Created: Oct 16, 2017 Updated: Apr 9, 2019

Resolved Date: Apr 1, 2019

Found In Version: 8.0.0.22

Fix Version: 8.0.0.30

Severity: Standard

Applicable for: Wind River Linux 8

Component/s: Userspace

Description

OpenVPN versions before 2.3.3 and 2.4.x before 2.4.4 are vulnerable to a buffer overflow vulnerability when key-method 1 is used, possibly resulting in code execution.

https://nvd.nist.gov/vuln/detail/CVE-2017-12166

CVEs

CVE-2017-12166