high7.5
CVE-2017-7508
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
Impact
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn | through 2.3.16 Versions 2.4.0, 2.4.1, 2.4.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2017/dsa-3900
- http://www.securityfocus.com/bid/99230
- http://www.securitytracker.com/id/1038768
- https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
- http://www.debian.org/security/2017/dsa-3900
- http://www.securityfocus.com/bid/99230
- http://www.securitytracker.com/id/1038768
- https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243