Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:alpm/archlinux/openvpn@2.4.2-1
purl pkg:alpm/archlinux/openvpn@2.4.2-1
Next non-vulnerable version 2.4.3-1
Latest non-vulnerable version 2.5.2-1
Risk 4.5
Vulnerabilities affecting this package (5)
Vulnerability Summary Fixed by
VCID-98sq-tcbt-fbde
Aliases:
CVE-2017-7512
AMP: validation bypass in oauth
2.4.3-1
Affected by 0 other vulnerabilities.
VCID-n8nh-wf64-8fgr
Aliases:
CVE-2017-7508
security update
2.4.3-1
Affected by 0 other vulnerabilities.
VCID-rkee-udq8-afg2
Aliases:
CVE-2017-7522
openvpn: Multiple security issues fixed in OpenVPN 2.4.3 and 2.3.17
2.4.3-1
Affected by 0 other vulnerabilities.
VCID-vucu-2pfy-93ds
Aliases:
CVE-2017-7521
security update
2.4.3-1
Affected by 0 other vulnerabilities.
VCID-zuyu-zw1g-uqg7
Aliases:
CVE-2017-7520
security update
2.4.3-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-crrt-th9e-z3ay OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker. CVE-2017-7479
VCID-wk2j-j9y1-5yhp OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2. CVE-2017-7478

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T18:27:11.104128+00:00 Arch Linux Importer Affected by VCID-rkee-udq8-afg2 https://security.archlinux.org/AVG-319 38.0.0
2026-04-01T18:26:15.347728+00:00 Arch Linux Importer Fixing VCID-wk2j-j9y1-5yhp https://security.archlinux.org/AVG-271 38.0.0
2026-04-01T18:26:15.325006+00:00 Arch Linux Importer Fixing VCID-crrt-th9e-z3ay https://security.archlinux.org/AVG-271 38.0.0
2026-04-01T18:24:47.069399+00:00 Arch Linux Importer Affected by VCID-n8nh-wf64-8fgr https://security.archlinux.org/AVG-318 38.0.0
2026-04-01T18:24:47.043904+00:00 Arch Linux Importer Affected by VCID-98sq-tcbt-fbde https://security.archlinux.org/AVG-318 38.0.0
2026-04-01T18:24:47.018839+00:00 Arch Linux Importer Affected by VCID-zuyu-zw1g-uqg7 https://security.archlinux.org/AVG-318 38.0.0
2026-04-01T18:24:46.993971+00:00 Arch Linux Importer Affected by VCID-vucu-2pfy-93ds https://security.archlinux.org/AVG-318 38.0.0