CVE-2013-2061

Published: Nov 18, 2013Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher.

Affected (16)

Products: Openvpn: Openvpn, Openvpn Access Server · Opensuse: Opensuse

2 products

Openvpn Access Server

1 product

Configuration A

15 vulnerable

Vulnerable Software	Affected Versions
Openvpn Openvpn	version ≤ 2.3.0
Openvpn Openvpn	Version 1.2.0
Openvpn Openvpn	Version 1.2.1
Openvpn Openvpn	Version 1.3.0
Openvpn Openvpn	Version 1.3.1
Openvpn Openvpn	Version 1.3.2
Openvpn Openvpn	Version 1.4.0
Openvpn Openvpn	Version 1.4.1
Openvpn Openvpn	Version 1.4.2
Openvpn Openvpn	Version 1.4.3
Openvpn Openvpn	Version 1.5.0
Openvpn Openvpn	Version 1.6.0
Openvpn Openvpn	Version 2.1.0
Openvpn Openvpn	Version 2.2.0
Openvpn Openvpn Access Server	Version 2.0.0

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 11.4

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (20)

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105568.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105609.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-11/msg00012.html

Source: secalert@redhat.com

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-11/msg00016.html

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:167

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2013/05/06/6

Source: secalert@redhat.com

https://bugs.gentoo.org/show_bug.cgi?id=468756

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=960192

Source: secalert@redhat.com

https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-f375aa67cc

Source: secalert@redhat.com

https://github.com/OpenVPN/openvpn/commit/11d21349a4e7e38a025849479b36ace7c2eec2ee

Source: secalert@redhat.com

ExploitPatch

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105568.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2013-May/105609.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-11/msg00012.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://lists.opensuse.org/opensuse-updates/2013-11/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:167

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2013/05/06/6

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugs.gentoo.org/show_bug.cgi?id=468756

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=960192

Source: af854a3a-2127-422b-91ae-364da2661108

https://community.openvpn.net/openvpn/wiki/SecurityAnnouncement-f375aa67cc

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/OpenVPN/openvpn/commit/11d21349a4e7e38a025849479b36ace7c2eec2ee

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatch

Timeline

No history available yet.