Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-junc-6y8j-cbe2
Vulnerability ID VCID-junc-6y8j-cbe2
Aliases CVE-2024-28882
Summary OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-772 Missing Release of Resource after Effective Lifetime
System Score Found at
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
epss 0.00345 https://api.first.org/data/v1/epss?cve=CVE-2024-28882
cvssv3.1 4.3 https://community.openvpn.net/openvpn/wiki/CVE-2024-28882
ssvc Track https://community.openvpn.net/openvpn/wiki/CVE-2024-28882
cvssv3.1 4.3 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1 4.3 https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html
ssvc Track https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-28882
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
1074488 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074488
CVE-2024-28882 https://community.openvpn.net/openvpn/wiki/CVE-2024-28882
msg07634.html https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html
USN-6860-1 https://usn.ubuntu.com/6860-1/
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Found at https://community.openvpn.net/openvpn/wiki/CVE-2024-28882
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-09T14:48:10Z/ Found at https://community.openvpn.net/openvpn/wiki/CVE-2024-28882
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L Found at https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-07-09T14:48:10Z/ Found at https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html
Exploit Prediction Scoring System (EPSS)
Percentile 0.57093
EPSS Score 0.00345
Published At April 7, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:58:31.097045+00:00 Ubuntu USN Importer Import https://usn.ubuntu.com/6860-1/ 38.0.0