# CVE-2023-46850: Incorrect use of send buffer can cause memory to be sent to peer
-
OpenVPN 2.6 from version 2.6.0 up to and including 2.6.6 incorrectly uses a send buffer after it has been freed in some circumstances. This error causes some freed memory to be sent to the peer. All configurations using TLS (i.e., not using `--secret`) are affected by this issue.
+
OpenVPN 2.6 from v2.6.0 up to and including v.2.6.6 incorrectly use a send buffer after it has been free()d in some circumstances, causing some free()d memory to be sent to the peer. All configurations using TLS (e.g. not using --secret) are affected by this issue.
