OpenVPN vulnerability

2014-12-0200:00:00

ubuntu.com

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

6.2 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.3%

JSON

Releases

Ubuntu 14.10
Ubuntu 14.04 ESM
Ubuntu 12.04

Packages

openvpn - virtual private network software

Details

Dragana Damjanovic discovered that OpenVPN incorrectly handled certain
control channel packets. An authenticated attacker could use this issue to
cause an OpenVPN server to crash, resulting in a denial of service.

OSVersionArchitecturePackageVersionFilename
Ubuntu14.10noarchopenvpn< 2.3.2-9ubuntu1.1UNKNOWN
Ubuntu14.04noarchopenvpn< 2.3.2-7ubuntu3.1UNKNOWN
Ubuntu12.04noarchopenvpn< 2.2.1-8ubuntu1.4UNKNOWN