[情报] The OpenVPN post-audit bug bonanza

楼主: asdfghjklasd (好累的大一生活)   2017-06-28 09:37:46
OpenVPN 最近有一点多的漏洞。
来源:
http://tinyurl.com/ycejjzol
漏洞:
CVE-2017-7521
Remote server crashes/double-free/memory leaks in certificate processing
CVE-2017-7520
Remote (including MITM) client crash, data leak
Reported to the OpenVPN security list on June 6. No CVE
Remote (including MITM) client stack buffer corruption
CVE-2017-7508
Remote server crash (forced assertion failure)
CVE-2017-7522
Crash mbed TLS/PolarSSL-based server
Reported to the OpenVPN security list on May 12 No CVE
Stack buffer overflow if long –tls-cipher is given
有兴趣了解的可以看来源连结。

Links booklink

Contact Us: admin [ a t ] ucptt.com