CVE-2020-7224

Published: Apr 16, 2020Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.

Affected (1)

Products: Aviatrix: Openvpn

Aviatrix

1 product

Openvpn

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aviatrix Openvpn	Up to 2.5.7

References (6)

https://docs.aviatrix.com/#security-bulletin

Source: cve@mitre.org

Vendor Advisory

https://docs.aviatrix.com/HowTos/security_bulletin_article.html

Source: cve@mitre.org

Vendor Advisory

https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001

Source: cve@mitre.org

Vendor Advisory

https://docs.aviatrix.com/#security-bulletin

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.aviatrix.com/HowTos/security_bulletin_article.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.