PatchTheCVEhola vulnerabilities
Recent CVEs affecting hola products. 2 tracked.
hola has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-03-12. Highest priority: CVE-2018-6623 (score 45/100).
- CVE-2018-6623 HIGH 8.8 DOWNGRADE An issue was discovered in Hola 1.79.859
- CVE-2017-16757 HIGH 7.8 DOWNGRADE Hola VPN 1.34 has weak permissions (Everyone:F) under %PROGRAMFILES%, which allows local users to gain privile
FAQ
How do I fix hola vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hola being exploited right now?
None of the tracked hola CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hola CVE should I patch first?
CVE-2018-6623 currently ranks highest (45/100): An issue was discovered in Hola 1.79.859.