Medium severity5.3NVD Advisory· Published Aug 25, 2024· Updated Jun 17, 2026

CVE-2023-48957

Description

PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PureVPN/PureVPN2 versions
cpe:2.3:a:purevpn:purevpn:2.0.2:*:*:*:*:linux:*:*+ 1 more
- cpe:2.3:a:purevpn:purevpn:2.0.2:*:*:*:*:linux:*:*
- (no CPE)range: = 2.0.2-Productions
PureVPN/PureVPN Linux clientdescription

Patches

Vulnerability mechanics

References

latesthackingnews.com/2023/11/13/multiple-vulnerabilities-found-in-purevpn-one-remains-unpatched/nvdExploitThird Party Advisory
www.rafaybaloch.com/2023/11/Multiple%20Critical-Vulnerabilities-in-PureVPN.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000