Known vulnerabilities in openvpn-auth-pam-plugin
Vendor:
SUSE
Software:
openvpn-auth-pam-plugin
Software CPE:
cpe:2.3:o:suse:openvpn-auth-pam-plugin:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
12
Public exploits:
0
Known exploited (KEV):
0
Breakdown by Severity Chart
2.6.10-150600.3.37.1
2.5.6-150400.3.28.1
2.3.8-16.38.1
2.5.6-150400.3.12.1
2.6.10-150600.3.26.1
2.6.10-150600.3.23.1
2.6.10-150600.3.20.1
2.6.8-150600.3.17.1
2.5.6-150400.3.9.1
2.3.8-16.35.1
2.6.8-150600.3.14.1
2.3.8-16.32.1
2.6.8-150600.3.3.1
2.4.3-150000.5.10.1
2.3.8-16.29.1
2.4.3-5.7.1
2.3.8-16.26.1
2.5.6-150400.3.3.1
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU147005 - Resource exhaustion CVE-2026-84732 |
CWE-400 | Medium | 2.3.8-16.38.1 | 05.09.2026 |
SB2026090525 SB20260921186 SB20260925183 and 2 more |
||
| #VU139872 - Improper input validation CVE-2026-13122 |
CWE-20 | Medium | 2.6.10-150600.3.23.1 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 4 more |
||
| #VU139873 - Missing release of memory after effective lifetime CVE-2026-12932 |
CWE-401 | Medium | 2.5.6-150400.3.12.1 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 5 more |
||
| #VU139875 - Missing release of memory after effective lifetime CVE-2026-13698 |
CWE-401 | Medium | 2.6.10-150600.3.23.1 | 02.07.2026 |
SB2026072869 SB2026072873 SB2026072874 and 5 more |
||
| #VU127529 - Improper input validation CVE-2026-35058 |
CWE-20 | Low | 2.5.6-150400.3.12.1 | 24.04.2026 |
SB20260424124 SB20260424129 SB20260424130 and 14 more |
||
| #VU118819 - Insufficient Verification of Data Authenticity CVE-2025-13086 |
CWE-345 | Medium | 2.6.10-150600.3.20.1 | 27.11.2025 |
SB2025112769 SB2025112771 SB2025112840 and 4 more |
||
| #VU106925 - Reachable Assertion CVE-2025-2704 |
CWE-617 | Medium | 2.6.8-150600.3.17.1 | 03.04.2025 |
SB2025040316 SB2025040322 SB2025040323 and 6 more |
||
| #VU92938 - Resource Management Errors CVE-2024-28882 |
CWE-399 | Low | 2.3.8-16.32.1, 2.6.8-150600.3.3.1 | 20.06.2024 |
SB20240620213 SB2024062132 SB2024070301 and 5 more |
||
| #VU92937 - Resource exhaustion CVE-2024-5594 |
CWE-400 | Low | 2.3.8-16.35.1, 2.5.6-150400.3.9.1, 2.6.8-150600.3.14.1 | 20.06.2024 |
SB20240620213 SB2024062132 SB2024070301 and 8 more |
||
| #VU61608 - Improper Authentication CVE-2022-0547 |
CWE-287 | Medium | 2.3.8-16.29.1, 2.4.3-150000.5.10.1, 2.5.6-150400.3.3.1 | 24.03.2022 |
SB2022032420 SB2022032423 SB2022040412 and 17 more |
||
| #VU52479 - Improper Authentication CVE-2020-15078 |
CWE-287 | Medium | 2.3.8-16.26.1, 2.4.3-5.7.1 | 21.04.2021 |
SB2021042156 SB2021052621 SB2021090828 and 11 more |
||
| #VU27616 - Resource Management Errors CVE-2020-11810 |
CWE-399 | Low | 2.4.3-5.7.1 | 10.05.2020 |
SB2020051001 SB2020073009 SB2020041802 and 11 more |