Ubuntu 21.10, 20.04, 18.04: USN-5347-1 Moderate: OpenVPN Auth Bypass

ubuntu

March 24, 2022

OpenVPN could allow unintended access to network services.

Summary

OpenVPN could allow unintended access to network services.

Software Description:

- openvpn: virtual private network software

Details:

It was discovered that OpenVPN incorrectly handled certain configurations

with multiple authentication plugins. A remote attacker could possibly use

this issue to bypass authentication using incomplete credentials.

Topics Covered

security advisory ubuntu authentication bypass openvpn network access authorization issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 21.10:
  openvpn                         2.5.1-3ubuntu1.1

Ubuntu 20.04 LTS:
  openvpn                         2.4.7-1ubuntu2.20.04.4

Ubuntu 18.04 LTS:
  openvpn                         2.4.4-2ubuntu1.7

In general, a standard system update will make all the necessary changes.