Stack-buffer-overflow in ntlm_phase_3 in OpenVPN
Summary
OSV-2022-932: Stack-buffer-overflow in ntlm_phase_3. Affects openvpn versions >= e55bedd4ea435f95d288e60691abc6e53b8bf014. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenVPN is an open-source virtual private network (VPN) software that allows secure remote access to private networks. It provides encryption and authentication mechanisms to ensure the confidentiality and integrity of data transmitted over the network. However, a vulnerability has been discovered in the ntlm_phase_3 function of OpenVPN, which can lead to a stack-buffer-overflow condition.
Vulnerability Detail
The vulnerability in OpenVPN arises from a stack-buffer-overflow in the ntlm_phase_3 function. This function is responsible for handling NTLM authentication during the establishment of an HTTP proxy passthrough. An attacker can exploit this vulnerability by sending a specially crafted request, causing a stack-buffer-overflow and potentially executing arbitrary code on the target system. The severity of this vulnerability is rated as HIGH.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable NTLM authentication or restrict access to the affected functionality. However, this may impact the functionality and usability of the OpenVPN installation. It is strongly advised to apply the official fix as soon as possible.
Conclusion
In conclusion, a stack-buffer-overflow vulnerability has been discovered in the ntlm_phase_3 function of OpenVPN. This vulnerability can be exploited to execute arbitrary code on the target system. It is recommended to update OpenVPN to a patched version or apply the provided workaround. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for openvpn →
FAQ
OpenVPN is an open-source VPN software that provides secure remote access to private networks.
The vulnerability can allow an attacker to execute arbitrary code on the target system, potentially compromising its security.
To fix this vulnerability, update OpenVPN to a version that includes the necessary patches.
As a temporary workaround, users can disable NTLM authentication or restrict access to the affected functionality.
You can find more information about this vulnerability in the OSS-Fuzz report: [link to the report].
References
Related vulnerabilities
Recent vulnerabilities recorded for openvpn.
