Patchwire CVEs, their patch status, and feeds to follow them

CVE-2006-1629

Fixed in a distro release EPSS 3%

OpenVPN 2.0 through 2.0.5 allows remote malicious servers to execute arbitrary code on the client by using setenv with the LD_PRELOAD environment variable.

Published 2006-04-06 · CVE record · OSV

Products: openvpn, openvpn_access_server

Distro releases

ReleasePackageFixed in
Debian 12openvpn2.0.6-1
Debian 13openvpn2.0.6-1
Debian 14openvpn2.0.6-1
Debian 3.1openvpn2.0-1sarge3
openSUSE Tumbleweedopenvpn2.5.3-1.2