Lucene search
Gentoo FoundationMGASA-2014-0512HistoryDec 05, 2014 - 7:59 p.m.
Updated openvpn package fixes CVE-2014-8104
2014-12-0519:59:28
Gentoo Foundation
advisories.mageia.org
14
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
0.006 Low
EPSS
Percentile
78.3%
Updated openvpn packages fix security vulnerability: Dragana Damjanovic discovered that OpenVPN incorrectly handled certain control channel packets. An authenticated attacker could use this issue to cause an OpenVPN server to crash, resulting in a denial of service (CVE-2014-8104).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 4 | noarch | openvpn | < 2.3.2-3.1 | openvpn-2.3.2-3.1.mga4 |
Related
cve
cve
CVE-2014-8104
2014-12-03 18:59:00
nessus
nessus
Mandriva Linux Security Advisory : openvpn (MDVSA-2014:246)
2014-12-15 00:00:00
SuSE 11.3 Security Update : OpenVPN (SAT Patch Number 10061)
2014-12-09 00:00:00
Ubuntu 14.04 LTS : OpenVPN vulnerability (USN-2430-1)
2014-12-03 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-459)
2015-09-08 00:00:00
openSUSE: Security Advisory for openvpn (openSUSE-SU-2014:1594-1)
2014-12-09 00:00:00
Fedora Update for openvpn FEDORA-2014-16273
2014-12-14 00:00:00
debiancve
debiancve
CVE-2014-8104
2014-12-03 18:59:00
osv
osv
openvpn - security update
2014-12-01 00:00:00
nvd
nvd
CVE-2014-8104
2014-12-03 18:59:00
amazon
amazon
Medium: openvpn
2014-12-10 13:25:00
fedora
fedora
[SECURITY] Fedora 20 Update: openvpn-2.3.6-1.fc20
2014-12-13 09:43:06
[SECURITY] Fedora 21 Update: openvpn-2.3.6-1.fc21
2014-12-12 04:14:16
[SECURITY] Fedora 20 Update: pkcs11-helper-1.11-3.fc20
2014-12-13 09:43:05
prion
prion
Code injection
2014-12-03 18:59:00
freebsd
freebsd
OpenVPN -- denial of service security vulnerability
2014-12-01 00:00:00
ubuntucve
ubuntucve
CVE-2014-8104
2014-12-01 00:00:00
cvelist
cvelist
CVE-2014-8104
2014-12-03 18:00:00
ubuntu
ubuntu
OpenVPN vulnerability
2014-12-02 00:00:00
securityvulns
securityvulns
OpenVPN DoS
2014-12-02 00:00:00
[USN-2430-1] OpenVPN vulnerability
2014-12-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openvpn version 2.3.6-alt1
2015-01-15 00:00:00
slackware
slackware
[slackware-security] openvpn
2014-12-11 04:12:09
archlinux
archlinux
openvpn: denial of service
2014-12-02 00:00:00
suse
suse
Security update for OpenVPN (important)
2014-12-09 01:04:46
Security update for openvpn (important)
2014-12-23 20:04:48
Security update for openvpn (important)
2014-12-08 17:06:53
gentoo
gentoo
OpenVPN: Denial of service
2014-12-26 00:00:00
debian
debian
[SECURITY] [DLA 98-1] openvpn security update
2014-12-02 21:35:28
[SECURITY] [DSA 3084-1] openvpn security update
2014-12-01 20:27:43
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:N/I:N/A:C
0.006 Low
EPSS
Percentile
78.3%
Related for MGASA-2014-0512