[Git][security-tracker-team/security-tracker][master] Mark three openvpn related CVEs as not-affected

Salvatore Bonaccorso (@carnil) carnil at debian.org
Tue Jul 9 09:47:59 BST 2024



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
18c50273 by Salvatore Bonaccorso at 2024-07-09T10:47:18+02:00
Mark three openvpn related CVEs as not-affected

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -177,13 +177,16 @@ CVE-2024-34702 (Botan is a C++ cryptography library. X.509 certificates can iden
 CVE-2024-31504 (Buffer Overflow vulnerability in SILA Embedded Solutions GmbH freemodb ...)
 	NOT-FOR-US: SILA Embedded Solutions GmbH freemodbus
 CVE-2024-27903 (OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be lo ...)
-	TODO: check
+	- openvpn <not-affected> (Only affects Windows)
+	NOTE: https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/
 CVE-2024-27459 (The interactive service in OpenVPN 2.6.9 and earlier allows an attacke ...)
-	TODO: check
+	- openvpn <not-affected> (Only affects Windows)
+	NOTE: https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/
 CVE-2024-25639 (Khoj is an application that creates personal AI agents. The Khoj Obsid ...)
 	TODO: check
 CVE-2024-24974 (The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVP ...)
-	TODO: check
+	- openvpn <not-affected> (Only affects Windows)
+	NOTE: https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974/
 CVE-2024-23562 (A security vulnerability in HCL Domino could allow disclosure of sensi ...)
 	NOT-FOR-US: HCL Domino
 CVE-2024-21778 (A heap-based buffer overflow vulnerability exists in the configuration ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/18c502734ba49f34f3c808f4f611482ebea0fa93

-- 
This project does not include diff previews in email notifications.
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/18c502734ba49f34f3c808f4f611482ebea0fa93
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20240709/c548fe93/attachment.htm>


More information about the debian-security-tracker-commits mailing list