Lucene search

[email protected]CVE-2014-8104

HistoryDec 03, 2014 - 6:59 p.m.

CVE-2014-8104

2014-12-0318:59:00

CWE-399

[email protected]

web.nvd.nist.gov

openvpn

server crash

denial of service

small control channel packet

cve-2014-8104

nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

5.9 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.3%

JSON

OpenVPN 2.x before 2.0.11, 2.1.x, 2.2.x before 2.2.3, and 2.3.x before 2.3.6 allows remote authenticated users to cause a denial of service (server crash) via a small control channel packet.

Affected configurations

NVD

Node

mageiamageiaMatch4.0

Node

debiandebian_linuxMatch7.0

debiandebian_linuxMatch8.0

Node

opensuseopensuseMatch12.3

opensuseopensuseMatch13.1

opensuseopensuseMatch13.2

Node

openvpnopenvpnMatch2.0.1_rc1

openvpnopenvpnMatch2.0.1_rc2

openvpnopenvpnMatch2.0.1_rc3

openvpnopenvpnMatch2.0.1_rc4

openvpnopenvpnMatch2.0.1_rc5

openvpnopenvpnMatch2.0.1_rc6

openvpnopenvpnMatch2.0.1_rc7

openvpnopenvpnMatch2.0.2_rc1

openvpnopenvpnMatch2.0.3_rc1

openvpnopenvpnMatch2.0.4

openvpnopenvpnMatch2.0.6_rc1

openvpnopenvpnMatch2.0.9

openvpnopenvpnMatch2.0_rc1

openvpnopenvpnMatch2.0_rc2

openvpnopenvpnMatch2.0_rc3

openvpnopenvpnMatch2.0_rc4

openvpnopenvpnMatch2.0_rc5

openvpnopenvpnMatch2.0_rc6

openvpnopenvpnMatch2.0_rc7

openvpnopenvpnMatch2.0_rc8

openvpnopenvpnMatch2.0_rc9

openvpnopenvpnMatch2.0_rc10

openvpnopenvpnMatch2.0_rc11

openvpnopenvpnMatch2.0_rc12

openvpnopenvpnMatch2.0_rc13

openvpnopenvpnMatch2.0_rc14

openvpnopenvpnMatch2.0_rc15

openvpnopenvpnMatch2.0_rc16

openvpnopenvpnMatch2.0_rc17

openvpnopenvpnMatch2.0_rc18

openvpnopenvpnMatch2.0_rc19

openvpnopenvpnMatch2.0_rc20

openvpnopenvpnMatch2.0_rc21

openvpnopenvpnMatch2.0_test1

openvpnopenvpnMatch2.0_test2

openvpnopenvpnMatch2.0_test3

openvpnopenvpnMatch2.0_test4

openvpnopenvpnMatch2.0_test5

openvpnopenvpnMatch2.0_test6

openvpnopenvpnMatch2.0_test7

openvpnopenvpnMatch2.0_test8

openvpnopenvpnMatch2.0_test9

openvpnopenvpnMatch2.0_test10

openvpnopenvpnMatch2.0_test11

openvpnopenvpnMatch2.0_test12

openvpnopenvpnMatch2.0_test14

openvpnopenvpnMatch2.0_test15

openvpnopenvpnMatch2.0_test16

openvpnopenvpnMatch2.0_test17

openvpnopenvpnMatch2.0_test18

openvpnopenvpnMatch2.0_test19

openvpnopenvpnMatch2.0_test20

openvpnopenvpnMatch2.0_test21

openvpnopenvpnMatch2.0_test22

openvpnopenvpnMatch2.0_test23

openvpnopenvpnMatch2.0_test24

openvpnopenvpnMatch2.0_test25

openvpnopenvpnMatch2.0_test26

openvpnopenvpnMatch2.0_test27

openvpnopenvpnMatch2.0_test28

openvpnopenvpnMatch2.0_test29

openvpnopenvpnMatch2.1beta-1

openvpnopenvpnMatch2.1beta-10

openvpnopenvpnMatch2.1beta-11

openvpnopenvpnMatch2.1beta-12

openvpnopenvpnMatch2.1beta-13

openvpnopenvpnMatch2.1beta-14

openvpnopenvpnMatch2.1beta-15

openvpnopenvpnMatch2.1beta-16

openvpnopenvpnMatch2.1beta-2

openvpnopenvpnMatch2.1beta-3

openvpnopenvpnMatch2.1beta-4

openvpnopenvpnMatch2.1beta-5

openvpnopenvpnMatch2.1beta-6

openvpnopenvpnMatch2.1beta-7

openvpnopenvpnMatch2.1beta-8

openvpnopenvpnMatch2.1beta-9

openvpnopenvpnMatch2.1rc_1

openvpnopenvpnMatch2.1rc_10

openvpnopenvpnMatch2.1rc_11

openvpnopenvpnMatch2.1rc_12

openvpnopenvpnMatch2.1rc_13

openvpnopenvpnMatch2.1rc_14

openvpnopenvpnMatch2.1rc_15

openvpnopenvpnMatch2.1rc_16

openvpnopenvpnMatch2.1rc_17

openvpnopenvpnMatch2.1rc_18

openvpnopenvpnMatch2.1rc_19

openvpnopenvpnMatch2.1rc_2

openvpnopenvpnMatch2.1rc_20

openvpnopenvpnMatch2.1rc_21

openvpnopenvpnMatch2.1rc_22

openvpnopenvpnMatch2.1rc_3

openvpnopenvpnMatch2.1rc_4

openvpnopenvpnMatch2.1rc_5

openvpnopenvpnMatch2.1rc_6

openvpnopenvpnMatch2.1rc_7

openvpnopenvpnMatch2.1rc_8

openvpnopenvpnMatch2.1rc_9

openvpnopenvpnMatch2.1.0

openvpnopenvpnMatch2.1.1

openvpnopenvpnMatch2.1.2

openvpnopenvpnMatch2.1.3

openvpnopenvpnMatch2.1.4

openvpnopenvpnMatch2.2beta1

openvpnopenvpnMatch2.2beta2

openvpnopenvpnMatch2.2beta3

openvpnopenvpnMatch2.2beta4

openvpnopenvpnMatch2.2beta5

openvpnopenvpnMatch2.2.0

openvpnopenvpnMatch2.2.1

openvpnopenvpnMatch2.2.2

openvpnopenvpnMatch2.3alpha1

openvpnopenvpnMatch2.3alpha2

openvpnopenvpnMatch2.3alpha3

openvpnopenvpnMatch2.3beta1

openvpnopenvpnMatch2.3rc1

openvpnopenvpnMatch2.3rc2

openvpnopenvpnMatch2.3.0

openvpnopenvpnMatch2.3.1

openvpnopenvpnMatch2.3.2

openvpnopenvpnMatch2.3.3

openvpnopenvpnMatch2.3.4

openvpnopenvpnMatch2.3.5

openvpnopenvpn_access_serverMatch2.0.0

openvpnopenvpn_access_serverMatch2.0.1

openvpnopenvpn_access_serverMatch2.0.2

openvpnopenvpn_access_serverMatch2.0.3

openvpnopenvpn_access_serverMatch2.0.5

openvpnopenvpn_access_serverMatch2.0.6

openvpnopenvpn_access_serverMatch2.0.7

openvpnopenvpn_access_serverMatch2.0.8

openvpnopenvpn_access_serverMatch2.0.10

Node

canonicalubuntu_linuxMatch12.04lts

canonicalubuntu_linuxMatch14.04lts

canonicalubuntu_linuxMatch14.10

CPENameOperatorVersion
mageia:mageiamageiaeq4.0

CPE	Name	Operator	Version
mageia:mageia	mageia	eq	4.0

References

advisories.mageia.org/MGASA-2014-0512.html

lists.opensuse.org/opensuse-security-announce/2014-12/msg00008.html

www.debian.org/security/2014/dsa-3084

www.mandriva.com/security/advisories?name=MDVSA-2015:139

www.ubuntu.com/usn/USN-2430-1

community.openvpn.net/openvpn/wiki/SecurityAnnouncement-97597e732b

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

5.9 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.3%

JSON

Related for CVE-2014-8104

nessus16 openvas18 debiancve1 osv1 nvd1 amazon1 fedora5 prion1 freebsd1 ubuntucve1 cvelist1 ubuntu1 securityvulns2 altlinux1 slackware1 archlinux1 suse3 gentoo1 debian2 mageia1