Description (CNA)
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OpenVPN Technologies, Inc / openvpn | affected 2.3.12 and newer |
CWE
CWE-617
References
- https://www.exploit-db.com/exploits/41993/
- https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
- http://www.securitytracker.com/id/1038473
- http://www.securityfocus.com/bid/98444
ADP enrichment
No English description supplied.