CVE-2023-6247 - AskarLabs CVE Database

CVE-2023-6247

Vendor Openvpn

Product OpenVPN 3 Core Library

Weakness CWE-476

Published February 20, 2024

Last update October 28, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.

Key dates

02Disclosure timeline

February 20, 2024 CVE published

October 28, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-6247 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/476.html

Related vulnerabilities

04Related CVE

CVE-2024-8235 Libvirt: crash of virtinterfaced via virconnectlistinterfaces() CVE-2022-23022 CVE-2024-38477 Apache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious request CVE-2026-47327 NULL pointer dereference in Ubuntu Linux AppArmor notification handling CVE-2020-7062 Null Pointer Dereference in PHP Session Upload Progress