CVE-2021-4234

2022-07-0619:10:17

CWE-406

OpenVPN

www.cve.org

openvpn

access server

vulnerability

packet resending

amplification attack

EPSS

0.001

Percentile

38.4%

JSON

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

CNA Affected

[
  {
    "product": "OpenVPN Access Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.10 and prior version"
      }
    ]
  }
]

References

openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-11-0

EPSS

0.001

Percentile

38.4%

JSON

Related for CVELIST:CVE-2021-4234