CVE-2013-2061

The openvpn_decrypt function in crypto.c in OpenVPN 2.3.0 and earlier, when
running in UDP mode, allows remote attackers to obtain sensitive
information via a timing attack involving an HMAC comparison function that
does not run in constant time and a padding oracle attack on the CBC mode
cipher.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=707329&gt;
• <https://bugs.launchpad.net/bugs/1184223&gt;