CVE-2024-28882 - AskarLabs CVE Database

CVE-2024-28882

Vendor Openvpn

Product OpenVPN

Weakness CWE-772

Published July 8, 2024

Last update November 1, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session

Key dates

02Disclosure timeline

July 8, 2024 CVE published

November 1, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-28882 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/772.html

Related vulnerabilities

04Related CVE

CVE-2023-31274 Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server CVE-2025-61670 Wasmtime has memory leak in C API with `externref` and `anyref` types CVE-2023-22302 BIG-IP HTTP profile vulnerability CVE-2026-2359 Multer vulnerable to Denial of Service via resource exhaustion CVE-2022-29884