Lucene search
GoogleOSV:DSA-3084-1HistoryDec 01, 2014 - 12:00 a.m.
openvpn - security update
2014-12-0100:00:00
Google
osv.dev
4
0.006 Low
EPSS
Percentile
78.3%
Dragana Damjanovic discovered that an authenticated client could crash
an OpenVPN server by sending a control packet containing less than
four bytes as payload.
For the stable distribution (wheezy), this problem has been fixed in
version 2.2.1-8+deb7u3.
For the unstable distribution (sid), this problem has been fixed in
version 2.3.4-5.
We recommend that you upgrade your openvpn packages.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openvpn | eq | 2.2.1-8+deb7u1 | |
| openvpn | eq | 2.2.1-8 | |
| openvpn | eq | 2.2.1-8+deb7u2 |
References
Related
cve
cve
CVE-2014-8104
2014-12-03 18:59:00
nessus
nessus
Mandriva Linux Security Advisory : openvpn (MDVSA-2014:246)
2014-12-15 00:00:00
SuSE 11.3 Security Update : OpenVPN (SAT Patch Number 10061)
2014-12-09 00:00:00
Ubuntu 14.04 LTS : OpenVPN vulnerability (USN-2430-1)
2014-12-03 00:00:00
openvas
openvas
Amazon Linux: Security Advisory (ALAS-2014-459)
2015-09-08 00:00:00
openSUSE: Security Advisory for openvpn (openSUSE-SU-2014:1594-1)
2014-12-09 00:00:00
Fedora Update for openvpn FEDORA-2014-16273
2014-12-14 00:00:00
debiancve
debiancve
CVE-2014-8104
2014-12-03 18:59:00
nvd
nvd
CVE-2014-8104
2014-12-03 18:59:00
amazon
amazon
Medium: openvpn
2014-12-10 13:25:00
fedora
fedora
[SECURITY] Fedora 20 Update: openvpn-2.3.6-1.fc20
2014-12-13 09:43:06
[SECURITY] Fedora 21 Update: openvpn-2.3.6-1.fc21
2014-12-12 04:14:16
[SECURITY] Fedora 20 Update: pkcs11-helper-1.11-3.fc20
2014-12-13 09:43:05
prion
prion
Code injection
2014-12-03 18:59:00
freebsd
freebsd
OpenVPN -- denial of service security vulnerability
2014-12-01 00:00:00
ubuntucve
ubuntucve
CVE-2014-8104
2014-12-01 00:00:00
cvelist
cvelist
CVE-2014-8104
2014-12-03 18:00:00
ubuntu
ubuntu
OpenVPN vulnerability
2014-12-02 00:00:00
securityvulns
securityvulns
OpenVPN DoS
2014-12-02 00:00:00
[USN-2430-1] OpenVPN vulnerability
2014-12-02 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package openvpn version 2.3.6-alt1
2015-01-15 00:00:00
slackware
slackware
[slackware-security] openvpn
2014-12-11 04:12:09
archlinux
archlinux
openvpn: denial of service
2014-12-02 00:00:00
suse
suse
Security update for OpenVPN (important)
2014-12-09 01:04:46
Security update for openvpn (important)
2014-12-23 20:04:48
Security update for openvpn (important)
2014-12-08 17:06:53
gentoo
gentoo
OpenVPN: Denial of service
2014-12-26 00:00:00
mageia
mageia
Updated openvpn package fixes CVE-2014-8104
2014-12-05 19:59:28
debian
debian
[SECURITY] [DLA 98-1] openvpn security update
2014-12-02 21:35:28
[SECURITY] [DSA 3084-1] openvpn security update
2014-12-01 20:27:43