CVE-2023-6247: Openvpn 3

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

The PKCS#7 parser in OpenVPN 3 Core Library versions through 3.8.3 did not properly validate the parsed data, which would result in the application crashing.

Affected products

• Openvpn Openvpn 3: before 3.8.4 (fixed in 3.8.4)

Published 2024-02-29. Last modified 2026-06-17.