Vulnerabilities > Openvpn > Openvpn > 2.1.6

DATE CVE VULNERABILITY TITLE RISK
2017-01-31 CVE-2016-6329 Information Exposure vulnerability in Openvpn
OpenVPN, when using a 64-bit block cipher, makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTP-over-OpenVPN session using Blowfish in CBC mode, aka a "Sweet32" attack.
network
openvpn CWE-200
4.3
4.3
2013-11-18 CVE-2013-2061 Information Exposure vulnerability in multiple products
The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when running in UDP mode, allows remote attackers to obtain sensitive information via a timing attack involving an HMAC comparison function that does not run in constant time and a padding oracle attack on the CBC mode cipher.
network
high complexity
openvpn opensuse CWE-200
2.6
2.6