Skip to content
NewA calmer, faster ZeroHour
Vulnerabilitymedium

OpenVox updates fix RCE and client impersonation vulnerabilities

Original title: OpenVox Server RCE and client impersonation vulnerabilities

oss-security ()1 · 1 read
Read at seclists.org
AI summary · x-ai/grok-4.7Summaries by Vani AI

Updates to openvox-agent, server and database versions 9.2.0+, 8.18.0+, 8.32.0+ mitigate RCE and impersonation issues.

The OpenVox project released updated versions addressing multiple vulnerabilities in server and client components. The fixes cover all known OpenVox and Puppet implementations. Users should upgrade to the specified versions.

Key facts
  • openvox-agent 9.3.0 and 8.32.0
  • openvox-server 9.2.0 and 8.18.0
  • openvoxdb 9.2.0 and 8.18.0
Security assessment · AI, from the article

Impact: remote code execution and client impersonation

What to do
  1. 1.update to version 9.2.0 or 8.18.0
  2. 2.update to version 9.3.0 or 8.32.0
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
Tags
openvoxrceimpersonationpuppetserverclient
Vendors
OpenVox
Products
OpenVox Serveropenvox-agentopenvoxdb

From the original article

Posted by Ben Ford on Nov 03 Hello from the OpenVox project. We released updates to mitigate two 9+ CVE vulnerabilities that affect all known OpenVox and Puppet versions and implementations. Please update any usage of OpenVox to the versions listed below or greater.

oss-security

seclists.org

Read the full article at oss-security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.