Lucene search

K
ubuntuUbuntuUSN-3284-1
HistoryMay 11, 2017 - 12:00 a.m.

OpenVPN vulnerabilities

2017-05-1100:00:00
ubuntu.com
48

6.9 Medium

AI Score

Confidence

High

0.236 Low

EPSS

Percentile

96.6%

Releases

  • Ubuntu 17.04

Packages

  • openvpn - virtual private network software

Details

It was discovered that OpenVPN improperly triggered an assert when
receiving an oversized control packet in some situations. A remote
attacker could use this to cause a denial of service (server or client
crash). (CVE-2017-7478)

It was discovered that OpenVPN improperly triggered an assert when packet
ids rolled over. An authenticated remote attacker could use this to cause a
denial of service (application crash). (CVE-2017-7479)

OSVersionArchitecturePackageVersionFilename
Ubuntu17.04noarchopenvpn< 2.4.0-4ubuntu1.2UNKNOWN
Ubuntu17.04noarchopenvpn-dbgsym< 2.4.0-4ubuntu1.2UNKNOWN