CVE-2017-7521

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension...

DEBIAN-CVE-2017-7521

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension...

UBUNTU-CVE-2017-7522

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character...

CVE-2017-7521

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension...

CVE-2017-7521

OpenVPN vulnerability CVE-2017-7521 affects OpenVPN versions before 2.4.3 and before 2.3.17, where memory exhaustion via a memory leaks and a double-free in extract_x509_extension() enables remote denial-of-service. Debian/DSA advisories list fixed releases (e.g., 2.4.0-6+deb9u1, 2.4.3-1, etc.). ...

CVE-2017-7520

CVE-2017-7520 affects OpenVPN versions prior to 2.4.3 and prior to 2.3.17, enabling denial-of-service and/or a potentially sensitive memory leak triggered by a man-in-the-middle attacker. The connected advisories and trackers confirm patches/update guidance to mitigate by upgrading OpenVPN to ver...

CVE-2017-7520

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker...

CVE-2017-7508

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet...

CVE-2017-7521

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service due to memory exhaustion caused by memory leaks and double-free issue in extractx509extension...

CVE-2017-7522

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character...

CVE-2017-7522

OpenVPN is affected by CVE-2017-7522. OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to a denial-of-service caused by an authenticated remote attacker sending a certificate with an embedded NULL character. The issue is described in multiple connected sources as part of a set of vu...

CVE-2017-7520

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service and/or possibly sensitive memory leak triggered by man-in-the-middle attacker...

CVE-2017-7508

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet...

CVE-2017-7508

CVE-2017-7508 affects OpenVPN versions prior to 2.4.3 and prior to 2.3.17, enabling a remote attacker to cause a denial-of-service by sending malformed IPv6 packets. The root cause is improper handling of specific malformed IPv6 packets, leading to application crash under remote attack conditions...

CVE-2017-7522

OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a certificate with an embedded NULL character...

Important: openvpn

Issue Overview: OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to remote denial-of-service when receiving malformed IPv6 packet. CVE-2017-7508 OpenVPN versions before 2.4.3 and before 2.3.17 are vulnerable to denial-of-service by authenticated remote attacker via sending a...

Debian Security Advisory DSA 3900-1 (openvpn - security update)

Several issues were discovered in openvpn, a virtual private network application. CVE-2017-7479 It was discovered that openvpn did not properly handle the rollover of packet identifiers. This would allow an authenticated remote attacker to cause a denial-of-service via application crash...

DSA-3900-1 openvpn - security update

Bulletin has no description...

Security update for openvpn (important)

This update for openvpn fixes the following issues: - Some parts of the certificate-parsing code did not always clear all allocated memory. This would have allowed clients to leak a few bytes of memory for each connection attempt, thereby facilitating a quite inefficient DoS attack on the server...

openSUSE: Security Advisory for openvpn (openSUSE-SU-2017:1680-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...