CVE-2017-7478 | BDVDB-2026-85471 Detail

OpenVPN Technologiesopenvpn

Description#

OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of Service of server via received large control packet. Note that this issue is fixed in 2.3.15 and 2.4.2.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-617

References#

https://www.exploit-db.com/exploits/41993/
https://community.openvpn.net/openvpn/wiki/QuarkslabAndCryptographyEngineerAudits
http://www.securitytracker.com/id/1038473
http://www.securityfocus.com/bid/98444

Exploit#

https://www.exploit-db.com/exploits/41993/

History#

Version 12017-05-15Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.