Bug 2294451 (CVE-2022-0547) - CVE-2022-0547 openvpn: Authentication bypass [NEEDINFO]
Summary: CVE-2022-0547 openvpn: Authentication bypass
Keywords:
Status: NEW
Alias: CVE-2022-0547
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2294452 2294453
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-06-27 01:05 UTC by Patrick Del Bello
Modified: 2024-06-27 10:14 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:
dazo: needinfo? (pdelbell)


Attachments (Terms of Use)

Description Patrick Del Bello 2024-06-27 01:05:33 UTC
OpenVPN 2.1 until v2.4.12 and v2.5.6 may enable authentication bypass in external authentication plug-ins when more than one of them makes use of deferred authentication replies, which allows an external user to be granted access with only partially correct credentials.

Comment 1 Patrick Del Bello 2024-06-27 01:05:56 UTC
Created openvpn tracking bugs for this issue:

Affects: epel-all [bug 2294453]
Affects: fedora-all [bug 2294452]

Comment 2 David Sommerseth 2024-06-27 10:10:17 UTC
Why is this being reported again?

From the pkgs.fedoraproject.org/rpms/openvpn git log:
--------------------------------------------------------------
$ git log --grep 2022-0547 epel9
commit 9c2a62d8fb7430969e280b87f0399df9e74a8255
Author: David Sommerseth <dazo>
Date:   Wed Mar 16 14:14:45 2022 +0100

    Update to upstream OpenVPN 2.5.6
    
    Fixes CVE-2022-0547
    
    Signed-off-by: David Sommerseth <dazo>

$ git log --grep 2022-0547 epel8
commit b30ce2819617af912fb777398a6b08c197d87c6f
Author: David Sommerseth <dazo>
Date:   Thu Mar 17 19:43:29 2022 +0100

    Update to upstream OpenVPN 2.4.12
    
    Fixes CVE-2022-0547
    
    Signed-off-by: David Sommerseth <dazo>

$ git log --grep 2022-0547 rawhide
commit cee438664951caf6a617bac1759607c2a5217a3c
Author: David Sommerseth <dazo>
Date:   Wed Mar 16 14:14:45 2022 +0100

    Update to upstream OpenVPN 2.5.6
    
    Fixes CVE-2022-0547
    
    Signed-off-by: David Sommerseth <dazo>

$ git log --grep 2022-0547 f40
commit cee438664951caf6a617bac1759607c2a5217a3c
Author: David Sommerseth <dazo>
Date:   Wed Mar 16 14:14:45 2022 +0100

    Update to upstream OpenVPN 2.5.6
    
    Fixes CVE-2022-0547
    
    Signed-off-by: David Sommerseth <dazo>

$ git log --grep 2022-0547 f39
commit cee438664951caf6a617bac1759607c2a5217a3c
Author: David Sommerseth <dazo>
Date:   Wed Mar 16 14:14:45 2022 +0100

    Update to upstream OpenVPN 2.5.6
    
    Fixes CVE-2022-0547
    
    Signed-off-by: David Sommerseth <dazo>
--------------------------------------------------------------

Comment 3 David Sommerseth 2024-06-27 10:14:26 UTC
Further details here: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0547


Note You need to log in before you can comment on or make changes to this bug.