Home A - Z
Page Index

An Otter Wiki

Commit 68d1aa

2026-07-23 13:29:12 flichtenheld: publish
Security Announcements/CVE-2026-11771.md ..
@@ 1,3 1,14 @@
- # CVE-2026-11771
+ # CVE-2026-11771 - NTLM proxy auth stack off-by-one write
- TBD
+ OpenVPN 2.x allows attackers via an off-by-one buffer write in the NTLM proxy authentication to potentially cause a crash via a crafted NTLM response from a malicious proxy server.
+
+ CVE Record: [CVE-2026-11771](https://www.cve.org/CVERecord?id=CVE-2026-11771)
+
+ Github:
+ * [OpenVPN/openvpn-private-issues#119](https://github.com/OpenVPN/openvpn-private-issues/issues/116)
+
+ Release notes:
+ * [openvpn-2.7.5](https://community.openvpn.net/ReleaseHistory#openvpn-275-released-1-july-2026)
+ * [openvpn-2.6.21](https://community.openvpn.net/ReleaseHistory#openvpn-2621-released-1-july-2026)
+
+ Reported-By: Tristan Madani (@TristanInSec)
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9