CVE-2017-7479
First published: Mon May 15 2017(Updated: )
OpenVPN versions before 2.3.15 and before 2.4.2 are vulnerable to reachable assertion when packet-ID counter rolls over resulting into Denial of Service of server by authenticated attacker.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Openvpn Openvpn | <=2.3.14 | |
| Openvpn Openvpn | =2.4.0 | |
| Openvpn Openvpn | =2.4.0-alpha2 | |
| Openvpn Openvpn | =2.4.0-beta1 | |
| Openvpn Openvpn | =2.4.0-beta2 | |
| Openvpn Openvpn | =2.4.0-rc1 | |
| Openvpn Openvpn | =2.4.0-rc2 | |
| Openvpn Openvpn | =2.4.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- vendor/openvpn
- canonical/openvpn openvpn
- version/openvpn openvpn/2.3.14
- version/openvpn openvpn/2.4.0
- version/openvpn openvpn/2.4.0-alpha2
- version/openvpn openvpn/2.4.0-beta1
- version/openvpn openvpn/2.4.0-beta2
- version/openvpn openvpn/2.4.0-rc1
- version/openvpn openvpn/2.4.0-rc2
- version/openvpn openvpn/2.4.1