CVE-2017-7520

2017-06-2713:00:00

CWE-200

redhat

www.cve.org

AI Score

7.4

Confidence

High

EPSS

0.005

Percentile

76.4%

JSON

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker.

CNA Affected

[
  {
    "product": "OpenVPN",
    "vendor": "OpenVPN Technologies, Inc",
    "versions": [
      {
        "status": "affected",
        "version": "before 2.4.3"
      },
      {
        "status": "affected",
        "version": "before 2.3.17"
      }
    ]
  }
]