CVE-2023-46850

CVE-2023-46850

Vendor Openvpn

Product OpenVPN 2 (Community)

Weakness CWE-416

Published November 11, 2023

Last update December 16, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a remote peer.

Key dates

02Disclosure timeline

November 11, 2023 CVE published

December 16, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-46850 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/416.html

Related vulnerabilities

Identifiers

CVE CVE-2023-46850

CWE CWE-416

Affected versions

Vendor Openvpn

Product OpenVPN 2 (Community)

Affected ≥ 2.6.0 and ≤ 2.6.6

Vendor Openvpn

Product Access Server

Affected ≥ 2.11.0 and ≤ 2.11.3

Vendor Openvpn

Product Access Server

Affected ≥ 2.12.0 and ≤ 2.12.2

01Description

02Disclosure timeline

03References

04Related CVE