This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

OpenVPN CVE-2017-5868

Hello,

I was just wondering if the XG Firewall uses OpenVPN, in particular the OpenVPN web UI. I don't think it does, but I just want to me sure because I use the OpenVPN clients on some of my endpoints to VPN in using SSL VPN Remote Access.

Here is a link if anyone wants to take a look for more information. Like I said, I don't think we are impacted but I just want to make sure.

http://www.theregister.co.uk/2017/05/24/last_week_openvpn_client_is_secure_brthis_week_unpatched_bug_in_openvpn_server/

Thanks!

This thread was automatically locked due to age.

Parents

0 lferrara over 6 years ago

sachingurung, Aditya Patel could you have a look at this thread and confirm if there is a bug inside OpenVPN used by XG and UTM9?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 6 years ago

sachingurung, Aditya Patel could you have a look at this thread and confirm if there is a bug inside OpenVPN used by XG and UTM9?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel

Children

+1 sachingurung over 6 years ago in reply to lferrara

Hi Luk,

If I am not wrong, this vulnerability affects OPEN VPN ACCESS SERVER (OpenVPN-AS) which is not used with either the XG or the UTM and hence, we are not affected.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 6 years ago in reply to sachingurung

Thanks Saching. Waiting for an official KB.

Regards
Cancel
Vote Up 0 Vote Down

Cancel