CVE-2020-11810

Katalog CVE

CVSS 3.7 · Low EPSS 1,7%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada openvpn, debian linux +1 lainnya. Skor CVSS 3.1 3.7 (Low) menurut NVD.

Deskripsi (NVD)

An issue was discovered in OpenVPN 2.4.x before 2.4.9. An attacker can inject a data channel v2 (P_DATA_V2) packet using a victim's peer-id. Normally such packets are dropped, but if this packet arrives before the data channel crypto parameters have been initialized, the victim's connection will be dropped. This requires careful timing due to the small time window (usually within a few seconds) between the victim client connection starting and the server PUSH_REPLY response back to the client. This attack will only work if Negotiable Cipher Parameters (NCP) is in use.

Rincian

Terbit di NVD

27 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 75,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.openvpn.net/openvpn/ticket/1272 exploit · advisory vendor
• https://patchwork.openvpn.net/patch/1079/ patch · advisory vendor
• https://github.com/OpenVPN/openvpn/commit/37bc691e7d26ea4eb61a8a434ebd7a9ae76225ab patch · advisory pihak ketiga
• https://bugzilla.suse.com/show_bug.cgi?id=1169925 issue tracking · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/05/msg00002.html mailing list · advisory pihak ketiga
• https://security-tracker.debian.org/tracker/CVE-2020-11810 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGHHV4YZANZW4...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JII7RYYYRBPQN...