medium6.5
CVE-2017-7522
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded…
Impact
OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn | through 2.3.16 Versions 2.4.0, 2.4.1, 2.4.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/99230
- http://www.securitytracker.com/id/1038768
- https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243
- http://www.securityfocus.com/bid/99230
- http://www.securitytracker.com/id/1038768
- https://community.openvpn.net/openvpn/wiki/VulnerabilitiesFixedInOpenVPN243