Ubuntu.comUB:CVE-2017-7478CVE-2017-7478
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.236 Low
EPSS
Percentile
96.5%
OpenVPN version 2.3.12 and newer is vulnerable to unauthenticated Denial of
Service of server via received large control packet. Note that this issue
is fixed in 2.3.15 and 2.4.2.
Bugs
Notes
| Author | Note |
|---|---|
| sbeattie | introduced in 3c1b19e04745177185decd14da82c71458442b82 (2.4.0); also was backported to 2.3 in 358f513c008bf01fadb82759ac75ffb8613fc785 (2.3.12) |
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.236 Low
EPSS
Percentile
96.5%