CVE-2024-28882

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-28882
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://community.openvpn.net/openvpn/wiki/CVE-2024-28882 Vendor Advisory
https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html Mailing List
https://community.openvpn.net/openvpn/wiki/CVE-2024-28882 Vendor Advisory
https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html Mailing List
Configurations

Configuration 1 (hide)

cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
History

10 Jun 2025, 16:26

Type Values Removed Values Added
CPE cpe:2.3:a:openvpn:openvpn:*:*:*:*:community:*:*:*
First Time Openvpn
Openvpn openvpn
References () https://community.openvpn.net/openvpn/wiki/CVE-2024-28882 - () https://community.openvpn.net/openvpn/wiki/CVE-2024-28882 - Vendor Advisory
References () https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html - () https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html - Mailing List
Information

Published : 2024-07-08 22:15

Updated : 2025-06-10 16:26

NVD link : CVE-2024-28882

Mitre link : CVE-2024-28882

CVE.ORG link : CVE-2024-28882

JSON object : View

Products Affected

openvpn

  • openvpn
CWE
CWE-772

Missing Release of Resource after Effective Lifetime