OpenVPN read_key Stack Based Buffer Overflow (CVE-2017-12166)

A stack-based buffer overflow vulnerability exists in OpenVPN. The vulnerability is due to a lack of bounds check on the length of key and HMAC lengths provided by the client. A remote, unauthenticated attacker can exploit this vulnerability by sending a crafted PCONTROLV1 message to a target...