CVE-2023-48957

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2024-08-25

Last modified

2025-03-14

Weaknesses

CWE-200

Affected products

• Purevpn (Purevpn)

References

• https://latesthackingnews.com/2023/11/13/multiple-vulnerabilities-found-in-purevpn-one-remains-unpatched/
• https://www.rafaybaloch.com/2023/11/Multiple%20Critical-Vulnerabilities-in-PureVPN.html?m=1