Back

CVE-2023-48957

Aug. 25, 2024, 5:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

PureVPN Linux client

  • 2.0.2-Productions

Source

cve@mitre.org

Tags

cve@mitre.org
2024-08-25
CVE-2023-48957

CVE-2023-48957 details

Published : Aug. 25, 2024, 5:15 p.m.
Last Modified : Aug. 25, 2024, 5:15 p.m.

Description

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.

CVSS Score

1 2 3 4 5 6 7 8 9 10

Weakness

Weakness Name Description

References

URL Source
https://latesthackingnews.com/2023/11/13/multiple-vulnerabilities-found-in-purevpn-one-remains-unpatched/ cve@mitre.org
https://www.rafaybaloch.com/2023/11/Multiple%20Critical-Vulnerabilities-in-PureVPN.html?m=1 cve@mitre.org
This website uses the NVD API, but is not approved or certified by it.