CVE-2020-36382 - AskarLabs CVE Database

CVE-2020-36382

Vendor N/A

Product OpenVPN Access Server

Weakness CWE-754

Published June 4, 2021

Last update August 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.

Key dates

02Disclosure timeline

June 4, 2021 CVE published

August 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-36382 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/754.html

Related vulnerabilities

04Related CVE

CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router CVE-2024-2502 Failure to update the tamper reset cause register when a tamper event occurs CVE-2026-5343 SAML SSO - Service Provider - Critical - Authentication bypass - SA-CONTRIB-2026-031 CVE-2023-5967 Denial of Service via crashing the Calls Plugin CVE-2022-22238 Junos OS and Junos OS Evolved: The rpd process will crash when a malformed incoming RESV message is processed